<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet href="/vendor/feed/atom.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en-GB">
                        <id>https://phptoptens.com/authors/nils-adermann/feed</id>
                                <link href="https://phptoptens.com/authors/nils-adermann/feed" rel="self"></link>
                                <title><![CDATA[Artisan Weekly — Author Feed]]></title>
                    
                                <subtitle>Featured links for a given author across Artisan Weekly editions.</subtitle>
                                                    <updated>2026-10-29T23:18:19+00:00</updated>
                        <entry>
            <title><![CDATA[Composer 2.11 Release]]></title>
            <link rel="alternate" href="https://blog.packagist.com/composer-2-11-release/" />
            <id>https://blog.packagist.com/composer-2-11-release/</id>
            <author>
                <name><![CDATA[Nils Adermann]]></name>
                <email><![CDATA[hello@example.com]]></email>

            </author>
            <summary type="html">
                <![CDATA[Composer 2.11 introduces a new cooldown dependency policy that withholds newly published package versions for a configurable period, enhancing security against malicious releases whilst providing several performance improvements and security fixes.]]>
            </summary>
                                    <updated>2026-10-29T23:18:19+00:00</updated>
        </entry>
            <entry>
            <title><![CDATA[Immutable Versions on Packagist]]></title>
            <link rel="alternate" href="https://blog.packagist.com/immutable-versions-on-packagist/" />
            <id>https://blog.packagist.com/immutable-versions-on-packagist/</id>
            <author>
                <name><![CDATA[Nils Adermann]]></name>
                <email><![CDATA[hello@example.com]]></email>

            </author>
            <summary type="html">
                <![CDATA[Packagist now enforces immutable version metadata, preventing silent rewrites when git tags are modified. Deleted versions remain visible with explanatory reasons, improving supply chain security and preventing confusion when packages are updated after initial publication.]]>
            </summary>
                                    <updated>2026-07-09T15:56:32+01:00</updated>
        </entry>
            <entry>
            <title><![CDATA[Composer and Packagist Supply Chain Security in 2026 | Nils Adermann | PHPverse 2026]]></title>
            <link rel="alternate" href="https://www.youtube.com/watch?v=ACxuzGsomv0&amp;list=PL0bgkxUS9EaK45-0M742u1WfK2G7FKXZQ&amp;index=3" />
            <id>https://www.youtube.com/watch?v=ACxuzGsomv0&amp;list=PL0bgkxUS9EaK45-0M742u1WfK2G7FKXZQ&amp;index=3</id>
            <author>
                <name><![CDATA[Nils Adermann]]></name>
                <email><![CDATA[hello@example.com]]></email>

            </author>
            <summary type="html">
                <![CDATA[Recent attacks on PHP packages via compromised GitHub accounts have forced a hard look at supply chain security with Composer and Packagist. Nils will cover what Packagist has shipped in response: transparency log, malware detection, Composer 2.10 dependency policies, version immutability, and the work still ahead: mandatory MFA, organizational controls, immutable artifacts, and build provenance. Along the way, he’ll explore the infrastructure powering it all and the funding side of running critical open-source infrastructure – where the money comes from today, and what it takes to keep this kind of work going.]]>
            </summary>
                                    <updated>2026-07-02T15:17:19+01:00</updated>
        </entry>
            <entry>
            <title><![CDATA[An Update on Composer & Packagist Supply Chain Security]]></title>
            <link rel="alternate" href="https://blog.packagist.com/an-update-on-composer-packagist-supply-chain-security/" />
            <id>https://blog.packagist.com/an-update-on-composer-packagist-supply-chain-security/</id>
            <author>
                <name><![CDATA[Nils Adermann]]></name>
                <email><![CDATA[hello@example.com]]></email>

            </author>
            <summary type="html">
                <![CDATA[Packagist outlines their comprehensive supply chain security roadmap following recent attacks, including integrated malware detection with Aikido, immutable stable versions launching this week, and plans for mandatory MFA and SLSA build provenance.]]>
            </summary>
                                    <updated>2026-05-28T07:45:26+01:00</updated>
        </entry>
    </feed>
