Skip to content


Subversion checkout URL

You can clone with
Download ZIP


Some package vendor rss doesn't valid #303

toopay opened this Issue · 5 comments

3 participants


Hello. I've created service as Github services, It basically a PHP port of Gemnasium.

The service rely on packagist rss/atom. Some project, like, can't build any depedencies data since the required vendor feed ( contain empty item(s).

Could someone check on it.

And, i wonder, if we could have some restful API as more convinient way to fetching package information, rather than RSS/Atom format.



you can get package information through{package}.json (the same url than when browsing the site, with .json appended)


Holy crap. Thanks @stof :)

@toopay toopay closed this

btw @toopay while I appreciate people are building services like this, I hope you are caching some of this data to avoid hitting packagist too often when your service gets real usage :)


Also integrating with to get higher warnings on known security vulnerabilities would be cool.


@Seldaek thanks for the feedback. Noted at toopay/depending#2

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Something went wrong with that request. Please try again.