EOL.WikiEOL.Wiki
← ← Back to all products

ComposerEnd of Life (EOL) Dates & Support Status

Active
Tools & MonitoringLatest Version: 2.10.3Latest Release: Aug 27, 2026

Composer is the dependency manager for PHP, managing libraries and packages for PHP projects.

Support summary

Composer currently has supported cycles. Track the next EOL date and validate upgrades before your change window.

What do EOL and support statuses mean?

Next EOL

Dec 31, 2026

Composer 2.2 · 95 days left

Supported cycles

2

1 lts

Versions

12

Latest Version

2.10.3

Active Support

2

EOL

10

Lifecycle Timeline

Jun 3, 2021As of Sep 27, 2026
2.10Active · Date not announced
2.9EOL · May 28, 2026
2.8EOL · Nov 13, 2025
2.7EOL · Oct 2, 2024
2.6EOL · Feb 8, 2024
2.5EOL · Sep 1, 2023
2.4EOL · Dec 20, 2022
2.3EOL · Aug 16, 2022
2.2Active · Dec 31, 2026
2.1EOL · Dec 22, 2021
ActiveSecurityEOLHistorical phase unknown

Bars show history up to the snapshot date. Gray intervals lack dated support boundaries; arrows indicate an unannounced EOL date, not a support guarantee.

Versions

ReleaseRelease DateActive SupportEOLLatest VersionLTSStatus
2.10May 28, 2026MaintainedDate not announced2.10.3No
Active
2.9Nov 13, 2025EndedMay 28, 20262.9.8No
EOL
2.8Oct 2, 2024EndedNov 13, 20252.8.12No
EOL
2.7Feb 8, 2024EndedOct 2, 20242.7.9No
EOL
2.6Sep 1, 2023EndedFeb 8, 20242.6.6No
EOL
2.5Dec 20, 2022EndedSep 1, 20232.5.8No
EOL
2.4Aug 16, 2022EndedDec 20, 20222.4.4No
EOL
2.3Mar 30, 2022EndedAug 16, 20222.3.10No
EOL
2.2Dec 22, 2021MaintainedDec 31, 20262.2.30
Yes
Active
2.1Jun 3, 2021EndedDec 22, 20212.1.14No
EOL
2.0Oct 24, 2020EndedJun 3, 20212.0.14No
EOL
1Apr 5, 2016EndedMay 30, 20261.10.28No
EOL

Data sources

Embed this badge

Composer end-of-life support status badge

Show Composer's live support status in your README, docs, or dashboard. The badge is a static SVG served from eol.wiki and follows the lifecycle data above.

Markdown

[![Composer end-of-life status](https://eol.wiki/badge/composer.svg)](https://eol.wiki/composer/)

HTML

<a href="https://eol.wiki/composer/"><img src="https://eol.wiki/badge/composer.svg" alt="Composer end-of-life status" height="20"></a>
All badges & lifecycle API →

Frequently Asked Questions

Which versions of Composer have reached end of life?
The following Composer versions have reached end of life and no longer receive security updates: 2.9, 2.8, 2.7, 2.6, 2.5, 2.4, 2.3, 2.1 (and 2 more). It is recommended to upgrade to a supported version.
Is it safe to continue using Composer 2.9?
Composer 2.9 has reached end of life and no longer receives security patches or bug fixes. Continuing to use it may expose your systems to known vulnerabilities. We strongly recommend upgrading to a supported version.
What is the latest version of Composer?
The latest version of Composer is 2.10.3, released in the 2.10 release cycle.
How many versions of Composer are currently supported?
Composer currently has 2 actively supported version(s): 2.10, 2.2.
When does Composer 2.10 reach end of life?
Composer 2.10 does not have a specific end-of-life date announced yet.
What should I do when Composer reaches end of life?
When a Composer version reaches end of life, you should: 1) Plan your migration to a supported version as soon as possible. 2) Review the release notes for breaking changes. 3) Test your applications thoroughly in a staging environment. 4) Update your dependencies to ensure compatibility with the new version.