
Security News
Open VSX Begins Implementing Pre-Publish Security Checks After Repeated Supply Chain Incidents
Following multiple malicious extension incidents, Open VSX outlines new safeguards designed to catch risky uploads earlier.
PHP Composer Tools
Advanced tools
Affected versions:
All-in-One composer integration, quick actions, commands, automatic installation, tasks, code lenses, diagnostics, and composer.json IntelliSense.
|
Composer "All-in-One" seamlessly integrates Composer and Packagist into Visual Studio Code.
Instantly run composer commands, leverage smart IntelliSense for composer.json,code lenses, quick actions, schema validation, browse and search packages, outdated dependency diagnostics, script running, and full composer task integration — all with almost zero setup. Only PHP is required. Composer is downloaded automatically. |
Composer "All-in-One" provides seamless Composer and Packagist integration in Visual Studio Code. Run Composer commands, leverage advanced IntelliSense for composer.json, access code lenses and quick actions, use schema validation, search packages, get abandoned package warnings, run/manage Composer scripts and much more.
Only PHP needs to be installed. Composer is downloaded and managed automatically for you.
Package Name Completion
Get autocomplete for package names directly from Packagist.

Package Version Completion
Receive intelligent version constraint suggestions.

Detailed Tooltips
Hover over packages or versions for rich information.

Context Actions
Quickly update or remove dependencies with a click.

Installed Version Inlay
See installed package versions directly in your composer.json.

Run-Script CodeLens
Execute custom Composer scripts from your editor.

Abandoned Package Diagnostics
Receive warnings about abandoned composer packages.

composer installcomposer update




about, archive, clear-cache, fund, licenses, outdated, reinstall, and moreRun any Composer command as a VS Code Task. No need for a global Composer install—this extension handles everything!
Example task:
"tasks": [
{
"label": "check",
"type": "composer",
"command": "check-platform-reqs",
"args": []
}
]
Your composer.json is automatically validated against the official JSON schema.
Composer will be downloaded and managed automatically, stored at the default location.
Override this with COMPOSER_HOME environment variable.
Set your PHP path via php.executablePath in VS Code settings.
| Setting | Description |
|---|---|
php.executablePath | Path to the PHP executable. Defaults to php if unset. If you are using PHP Tools, its selected PHP version will be used automatically. |
FAQs
All-in-One composer integration, quick actions, commands, automatic installation, tasks, code lenses, diagnostics, and composer.json IntelliSense.
We found that dev-studio-sense.php-comp-tools-vscode demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Following multiple malicious extension incidents, Open VSX outlines new safeguards designed to catch risky uploads earlier.

Research
/Security News
Threat actors compromised four oorzc Open VSX extensions with more than 22,000 downloads, pushing malicious versions that install a staged loader, evade Russian-locale systems, pull C2 from Solana memos, and steal macOS credentials and wallets.

Security News
Lodash 4.17.23 marks a security reset, with maintainers rebuilding governance and infrastructure to support long-term, sustainable maintenance.