Skip to content

Declare Composer dependencies the package uses - #132

Open
shadetheory wants to merge 2 commits into
masterfrom
cursor/declare-used-dependencies-8db1
Open

shadetheory wants to merge 2 commits into
masterfrom
cursor/declare-used-dependencies-8db1

Conversation

@shadetheory

Copy link
Copy Markdown
Owner

Summary

The package called OpenSSL, Carbon, and several Illuminate components without listing them in composer.json. It only required illuminate/contracts, which nothing in the code references. Those packages were present only because a Laravel app installs them through other dependencies.

This adds the requirements the code actually uses, with version constraints that match the supported Laravel 11, 12, and 13 range and PHP ^8.2:

  • ext-openssl
  • illuminate/collections, illuminate/console, illuminate/http, illuminate/process, and illuminate/support at ^11.0||^12.0||^13.0
  • nesbot/carbon at ^2.72.6||^3.8.4 (the same range Laravel 11 through 13 accepts)
  • orchestra/testbench-core in require-dev, because the test case class lives in that package

illuminate/contracts is removed. illuminate/support still requires it, and this package does not reference it.

The requirements section in the README lists the same packages.

Test plan

  • composer update resolves on the supported Laravel and PHP range
  • composer validate --strict --no-check-lock
  • vendor/bin/pest
Open in Web Open in Cursor 

cursoragent and others added 2 commits October 28, 2026 16:59
Require ext-openssl, the Illuminate components called from the
package, and nesbot/carbon on the Laravel 11-13 range. Require
orchestra/testbench-core for the test case class. Drop
illuminate/contracts, which the package does not reference.

Co-authored-by: Jordan Partridge <jordan@partridge.rocks>
Add the analyser as a dev dependency and run it after composer
validate. Ignore only the false positive where laravel/framework
replaces illuminate/*.

Co-authored-by: Jordan Partridge <jordan@partridge.rocks>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants