Composer Dependencies
Systematic, changelog-first playbook for safe Composer dependency updates.
Test report
- Verdict
- Tested · Works
- Score
- Tested
- Jul 16, 2026
- Environment
- Claude Code 2.x (agent harness)
- Upstream re-checked
- Aug 10, 2026 · b71c7c7
Follows a genuinely disciplined update cycle (audit, changelog-first, small batches, why-not before major bumps) that a generic answer skips entirely -- the skill-guided plan surfaced composer why-not and a post-update re-audit that the baseline answer never mentioned.
Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works
- Installs cleanly 5/5
- Triggers reliably 5/5
- Output vs. baseline 8/10
- Docs & honesty 5/5
What Composer Dependencies does
Guides PHP dependency updates through a changelog-first, small-batch, audit-then-verify cycle covering composer audit, Dependabot/Renovate config, version-constraint strategy, and abandoned-package replacement. Triggers when a user asks to update Composer packages, audit for vulnerabilities, manage composer.lock, or resolve version conflicts.
How to install Composer Dependencies
git clone https://github.com/krzysztofsurdy/code-virtuoso
mkdir -p ~/.claude/skills
cp -r code-virtuoso/skills/playbooks/composer-dependencies ~/.claude/skills/composer-dependencies
Skills live in ~/.claude/skills/ (global) or .claude/skills/
(per-project). Restart Claude Code after installing.
Commands — how to trigger Composer Dependencies
-
/composer-dependenciesSystematic, changelog-first playbook for safe Composer dependency updates.
It also activates on plain-language prompts like these:
-
Help me update doctrine/orm from 2.x to 3.x without breaking my Symfony app -
Can you audit my composer.lock for known security vulnerabilities? -
I want Renovate configured to auto-update our PHP packages safely
Frequently asked questions
- Is the Composer Dependencies skill free?
- Yes. The skill itself is free from krzysztofsurdy/code-virtuoso. SkillProof publishes the install command and an independent test verdict at no cost.
- Does Composer Dependencies work with Claude Code?
- We tested it with Claude Code 2.x (agent harness) on Jul 16, 2026. Verdict: Tested · Works. Follows a genuinely disciplined update cycle (audit, changelog-first, small batches, why-not before major bumps) that a generic answer skips entirely -- the skill-guided plan surfaced composer why-not and a post-update re-audit that the baseline answer never mentioned.
- What is the Composer Dependencies SkillProof Score?
- 9.2/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 8/10, docs & honesty 5/5.
- How do I install Composer Dependencies?
- Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
- Can I use Composer Dependencies with Cursor, Copilot, Gemini CLI, Codex or other AI tools?
- The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.