Code hosting website GitHub announced today plans to add support for a Dependency Graph for Composer-based PHP projects.

The packages weaponized a proof-of-concept (PoC) code dependency-confusion exploit that was recently devised by security researcher Alex Birsan to inject rogue code into developer projects.

Additionally, PHP 8 as a major release may mean older PHP code could be broken after upgrading. However, Roose noted that most of the breaking changes were deprecated before the 7.x versions.