# Packagist

**Canonical:** https://apis.io/providers/packagist/  
**Website:** https://packagist.org  
**APIs profiled:** 5

Packagist is the default package repository for Composer, the PHP dependency manager. It indexes over 454,000 open-source PHP packages — versions, dependencies, maintainers, download statistics, security advisories — and exposes them through a free public HTTP API plus a high-throughput static Composer v2 metadata mirror at repo.packagist.org. Packagist is MIT-licensed open source (composer/packagist on GitHub) and is operated by the Composer team, with funding from Private Packagist (the commercial hosted/self-hosted sibling product at packagist.com) and infrastructure sponsorships from Bunny.net and Aikido. Together with the Composer CLI, the SemVer library, the SPDX licenses helper, and the Satis static repository generator, Packagist anchors PHP's modern software supply chain.

## Kin Score — 44.7 / 100 (developing)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 44.7).

| Facet | Score |
|---|---|
| Discoverability | 74.1 |
| Contract Quality | 65.5 |
| Governance | 9.8 |
| Contract Governance | 9.8 |
| Operational Transparency | 23.7 |
| Developer Ergonomics | 45.2 |
| Commercial Clarity | 38.2 |
| Access Clarity | 38.2 |

## Agent readiness — 29.1 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Paid · Self-serve signup — onboarding: self-serve, pricing: paid, trial: no (confidence: high).

## APIs (5)

- **Packagist Metadata API** — Composer v2 static metadata and change tracking.
- **Packagist Packages API** — Discover and manage Composer packages.
- **Packagist Search API** — Search the Packagist registry.
- **Packagist Security API** — PHP security advisory database.
- **Packagist Statistics API** — Download and registry statistics.

## Agentic access (1)

- **Packagist Agentic Access** — 13 operations · 3 acting

## Security (2)

- **Packagist Authentication** — http · 1 scheme
- **Packagist Domain Security** — TLSv1.3 · HSTS · DMARC

## Plans (1)

- **Packagist Plans Pricing**

## Tags

Composer, PHP, Package Registry, Dependency Management, Open-Source, Developer Tools, Software Supply Chain, Security Advisories

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/packagist/). Scores are computed from the provider's own public artifacts under a published rubric.