Weave Code
Weaver
Helps Laravel developers discover, compare, and choose open-source packages. See popularity, security, maintainers, and scores at a glance to make better decisions.
Feedback
Share your thoughts, report bugs, or suggest improvements.
Subject
Message
Composer Changelog Bundle

Composer Changelog Bundle Laravel Package

idlab/composer-changelog-bundle

A Symfony bundle that brings Composer package changelogs into your application. It reads changelog data for installed dependencies and exposes it through services and Twig helpers, letting you display release notes, versions, and recent changes without leaving your project.

View on GitHub
Deep Wiki
Context7

Composer changelog generator

Frequently asked questions about Composer Changelog Bundle
Can I use idlab/composer-changelog-bundle in a Laravel application?
It is a Symfony bundle, not a Laravel package, so it will not auto-register a service provider or expose an Artisan command. Do not install it into a Laravel app expecting native integration; prefer running the underlying generator in CI or wrapping it only if the generator is a discrete class. Check whether symfony/framework-bundle is required, because Laravel does not ship that component.
How do I install idlab/composer-changelog-bundle?
Install with Composer and, in Symfony, register the bundle in your kernel or bundles.php and add bundle configuration. Laravel has no equivalent bundle registration, so installation there would be manual and unsupported by the package's design. Confirm PHP and symfony/* constraints with composer why-not before committing.
Does this package support Laravel?
No native Laravel support is described. It is built as a Symfony bundle with Symfony service container integration and a console command. For Laravel, treat it as release-engineering tooling to run outside the application, not as an in-app dependency.
Does it provide an Artisan command?
No. Its command is a Symfony Console command, and there is no Laravel service provider or Artisan command in the provided context. A Laravel wrapper would be custom code and would need to avoid pulling Symfony's framework bundle into the app.
Is it safe to use in production?
It is release-engineering tooling, not request, queue, or scheduler infrastructure, so its failure blast radius is normally a delayed release note. Still, it has zero adoption signals and no demonstrated production use, so scope it to dev or CI and audit composer.json before adding it. Do not register it in a production Laravel dependency graph.
How does it generate Composer changelogs?
The bundle integrates underlying Composer changelog tooling with Symfony's container and exposes generation through a console command. The blurb says it reads changelog data for installed dependencies and exposes services and Twig helpers for release notes, versions, and recent changes. Verify the exact data source in source code because the context does not specify lockfile parsing versus API calls.
Can I customize the changelog output?
The package is configurable through normal Symfony bundle configuration. The provided context does not confirm whether output templates are fully configurable or hardcoded. Inspect the generator and README before relying on it for release-note formatting.
Does it read composer.lock locally or call Packagist and GitHub APIs?
That is not stated in the provided context and must be verified by source inspection. If it calls external APIs, CI gains network dependency, token management, and rate-limit concerns, and air-gapped runners may fail. If it reads composer.lock locally, Composer internals drift across 2.x minors still needs testing.
What are good alternatives for Laravel projects?
Use the underlying changelog generator directly in CI, a custom Composer diff script, or another release-note tool that does not require Symfony bundle registration. Laravel projects should avoid adding a competing Symfony kernel and container model for one report. Prototype the CI-only path first.
Is idlab/composer-changelog-bundle actively maintained?
The provided assessment shows 0 stars, 0 dependents, a composite score of 0, and single-organization provenance, so there is no community validation or stated release cadence. Treat it as unvetted source code rather than an adopted dependency. Public-sector origin is a mild audit-mindedness signal, not a maintenance commitment.
Weaver

How can I help you explore Laravel packages today?

Conversation history is not saved when not logged in.
Prompt
Add packages to context
No packages found.
3mdikram/worldmoneywords
snowsoft/config
itmosoft/laravel-subscriptions
larva/laravel-ai-qwen
diephp/sequences
users-au/socialite-provider
twidpay/twid-logger
mrnewport/laravel-plaid
mrnewport/laravel-repo
mrnewport/laravel-docsign
mrnewport/laravel-stow
mrnewport/laravel-flow
mrnewport/laravel-priceable
mrnewport/laravel-nestedterms
fredmeng/laravel-apidoc-generator
itstructure/laravel-multilingual-tools
pdustdar/elasticsearch
markupai/php-sdk
rlacerda83/lumem-microservice-shipment
uni-method/symfony-lib