Composer Dependencies

Systematic, changelog-first playbook for safe Composer dependency updates.

Tested · Works

Test report

Verdict
Tested · Works
Score
9.2/10
Tested
Jul 16, 2026
Environment
Claude Code 2.x (agent harness)
Upstream re-checked
Aug 10, 2026 · b71c7c7

Follows a genuinely disciplined update cycle (audit, changelog-first, small batches, why-not before major bumps) that a generic answer skips entirely -- the skill-guided plan surfaced composer why-not and a post-update re-audit that the baseline answer never mentioned.

Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works

  • Installs cleanly 5/5
  • Triggers reliably 5/5
  • Output vs. baseline 8/10
  • Docs & honesty 5/5

What Composer Dependencies does

Guides PHP dependency updates through a changelog-first, small-batch, audit-then-verify cycle covering composer audit, Dependabot/Renovate config, version-constraint strategy, and abandoned-package replacement. Triggers when a user asks to update Composer packages, audit for vulnerabilities, manage composer.lock, or resolve version conflicts.

How to install Composer Dependencies

git clone https://github.com/krzysztofsurdy/code-virtuoso
mkdir -p ~/.claude/skills
cp -r code-virtuoso/skills/playbooks/composer-dependencies ~/.claude/skills/composer-dependencies

Skills live in ~/.claude/skills/ (global) or .claude/skills/ (per-project). Restart Claude Code after installing.

Commands — how to trigger Composer Dependencies

  • /composer-dependencies Systematic, changelog-first playbook for safe Composer dependency updates.

It also activates on plain-language prompts like these:

  • Help me update doctrine/orm from 2.x to 3.x without breaking my Symfony app
  • Can you audit my composer.lock for known security vulnerabilities?
  • I want Renovate configured to auto-update our PHP packages safely

Frequently asked questions

Is the Composer Dependencies skill free?
Yes. The skill itself is free from krzysztofsurdy/code-virtuoso. SkillProof publishes the install command and an independent test verdict at no cost.
Does Composer Dependencies work with Claude Code?
We tested it with Claude Code 2.x (agent harness) on Jul 16, 2026. Verdict: Tested · Works. Follows a genuinely disciplined update cycle (audit, changelog-first, small batches, why-not before major bumps) that a generic answer skips entirely -- the skill-guided plan surfaced composer why-not and a post-update re-audit that the baseline answer never mentioned.
What is the Composer Dependencies SkillProof Score?
9.2/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 8/10, docs & honesty 5/5.
How do I install Composer Dependencies?
Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
Can I use Composer Dependencies with Cursor, Copilot, Gemini CLI, Codex or other AI tools?
The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.