Composer 2.3 End of Life
Support dates and upgrade guidance — rebuilt from live data.
End of Life
Composer 2.3 reached end of life on 16 Aug 2022. It no longer receives security fixes.
1,454 days without security patches
Recommended action: upgrade to Composer 2.10. Check your versioncomposer --version
Support timeline
Official dates from the Composer release process.
| Milestone | Date | Status |
|---|---|---|
| Initial release | 30 Mar 2022 | — |
| End of life | 16 Aug 2022 | 4.0 years ago |
| Latest release | 2.3.10 · 13 Jul 2022 | final |
Where to go from 2.3
Recommended target: Composer 2.10.
The newest actively supported branch is Composer 2.10 (latest release 2.10.2).
Frequently asked questions
Is Composer 2.3 still safe to use?
Composer 2.3 reached end of life on 16 Aug 2022, 1,454 days ago, and is no longer covered by standard support. Running it means no guaranteed security fixes.
Can I still download Composer 2.3?
Yes — the final release (2.3.10) generally remains available from vendor archives and OS package mirrors, but installing it means running software with known, unpatched vulnerabilities.
What should I upgrade Composer 2.3 to?
Upgrade to Composer 2.10, the newest actively supported branch.