Composer 1 End of Life
Support dates and upgrade guidance — rebuilt from live data.
End of Life
Composer 1 reached end of life on 24 Oct 2020. It no longer receives security fixes.
2,115 days without security patches
Recommended action: upgrade to Composer 2.10. Check your versioncomposer --version
Support timeline
Official dates from the Composer release process.
| Milestone | Date | Status |
|---|---|---|
| Initial release | 5 Apr 2016 | — |
| End of life | 24 Oct 2020 | 5.8 years ago |
| Latest release | 1.10.28 · 13 May 2026 | final |
Where to go from 1
Recommended target: Composer 2.10.
The newest actively supported branch is Composer 2.10 (latest release 2.10.2).
Frequently asked questions
Is Composer 1 still safe to use?
Composer 1 reached end of life on 24 Oct 2020, 2,115 days ago, and is no longer covered by standard support. Running it means no guaranteed security fixes.
Can I still download Composer 1?
Yes — the final release (1.10.28) generally remains available from vendor archives and OS package mirrors, but installing it means running software with known, unpatched vulnerabilities.
What should I upgrade Composer 1 to?
Upgrade to Composer 2.10, the newest actively supported branch.