end-of-life.org

Composer 2.0 End of Life

Support dates and upgrade guidance — rebuilt from live data.

End of Life

Composer 2.0 reached end of life on 3 Jun 2021. It no longer receives security fixes.

1,893 days without security patches
Recommended action: upgrade to Composer 2.10.
Check your versioncomposer --version

Support timeline

Official dates from the Composer release process.

MilestoneDateStatus
Initial release24 Oct 2020
End of life 3 Jun 2021 5.2 years ago
Latest release2.0.14 · 21 May 2021 final

Where to go from 2.0

Recommended target: Composer 2.10.

The newest actively supported branch is Composer 2.10 (latest release 2.10.2).

Frequently asked questions

Is Composer 2.0 still safe to use?

Composer 2.0 reached end of life on 3 Jun 2021, 1,893 days ago, and is no longer covered by standard support. Running it means no guaranteed security fixes.

Can I still download Composer 2.0?

Yes — the final release (2.0.14) generally remains available from vendor archives and OS package mirrors, but installing it means running software with known, unpatched vulnerabilities.

What should I upgrade Composer 2.0 to?

Upgrade to Composer 2.10, the newest actively supported branch.

All Composer versions