Composer 2.4 End of Life
Support dates and upgrade guidance — rebuilt from live data.
End of Life
Composer 2.4 reached end of life on 20 Dec 2022. It no longer receives security fixes.
1,328 days without security patches
Recommended action: upgrade to Composer 2.10. Check your versioncomposer --version
Support timeline
Official dates from the Composer release process.
| Milestone | Date | Status |
|---|---|---|
| Initial release | 16 Aug 2022 | — |
| End of life | 20 Dec 2022 | 3.6 years ago |
| Latest release | 2.4.4 · 27 Oct 2022 | final |
Where to go from 2.4
Recommended target: Composer 2.10.
The newest actively supported branch is Composer 2.10 (latest release 2.10.2).
Frequently asked questions
Is Composer 2.4 still safe to use?
Composer 2.4 reached end of life on 20 Dec 2022, 1,328 days ago, and is no longer covered by standard support. Running it means no guaranteed security fixes.
Can I still download Composer 2.4?
Yes — the final release (2.4.4) generally remains available from vendor archives and OS package mirrors, but installing it means running software with known, unpatched vulnerabilities.
What should I upgrade Composer 2.4 to?
Upgrade to Composer 2.10, the newest actively supported branch.