Composer 2.1 End of Life
Support dates and upgrade guidance — rebuilt from live data.
End of Life
Composer 2.1 reached end of life on 22 Dec 2021. It no longer receives security fixes.
1,691 days without security patches
Recommended action: upgrade to Composer 2.10. Check your versioncomposer --version
Support timeline
Official dates from the Composer release process.
| Milestone | Date | Status |
|---|---|---|
| Initial release | 3 Jun 2021 | — |
| End of life | 22 Dec 2021 | 4.6 years ago |
| Latest release | 2.1.14 · 30 Nov 2021 | final |
Where to go from 2.1
Recommended target: Composer 2.10.
The newest actively supported branch is Composer 2.10 (latest release 2.10.2).
Frequently asked questions
Is Composer 2.1 still safe to use?
Composer 2.1 reached end of life on 22 Dec 2021, 1,691 days ago, and is no longer covered by standard support. Running it means no guaranteed security fixes.
Can I still download Composer 2.1?
Yes — the final release (2.1.14) generally remains available from vendor archives and OS package mirrors, but installing it means running software with known, unpatched vulnerabilities.
What should I upgrade Composer 2.1 to?
Upgrade to Composer 2.10, the newest actively supported branch.