Plugin Composer Laravel Package

Product Decisions This Supports

This package is officially deprecated and must never be adopted for new projects. Product decisions must prioritize immediate migration to captainhook/hook-installer to eliminate technical debt and security risks. Key actions include halting all new plugin-composer implementations, auditing existing usage for urgent migration, and aligning with CaptainHook’s modern architecture that decouples hook installation from core dependencies. Choosing hook-installer enables flexible installation options (PHAR, source, or PHIVE), removes unnecessary Composer dependencies, and ensures compatibility with PHP 8.x and Composer 2.0+ — critical for maintaining developer productivity and security posture.

When to Consider This Package

Never for new projects: The package is deprecated (last release January 2022), has 0 dependents, and lacks updates for modern PHP/Composer versions. Using it introduces significant technical debt and security vulnerabilities.
Only consider in temporary, exceptional legacy scenarios where migration is blocked by external constraints (e.g., frozen legacy systems), but even then:

• Treat as a short-term stopgap with a strict 30–60 day migration roadmap.
• Avoid if possible — prioritize upgrading PHP/Composer to enable migration to hook-installer.
  Look elsewhere for all other cases: Use captainhook/hook-installer (official replacement), Husky for JavaScript-focused workflows, or custom Git hook scripts for minimal overhead.

How to Pitch It (Stakeholders)

For executives: "This package is deprecated and no longer maintained — using it introduces security risks and technical debt with no future support. Migrating to hook-installer eliminates these risks, reduces long-term maintenance costs, and ensures our tooling stays compatible with modern development standards. It’s a zero-cost upgrade with immediate ROI in risk reduction and developer efficiency."
For engineering: "The deprecated plugin-composer forces redundant dependencies (e.g., captainhook/captainhook as a hard requirement) and breaks with PHP 8.2+/Composer 3.0. The replacement hook-installer removes this constraint, allowing flexible installation (PHAR, source, or PHIVE) and resolving common issues like PHP binary mismatches. We’ll migrate existing projects in a single sprint with no downtime — just update composer.json and run composer update."