Free dependency & PHP version check
No signup, no payment, full details. Check your composer.lock against public advisories, and your PHP version (including Ubuntu/Debian package versions with backported fixes).
Nothing is stored. Your composer.lock package names and versions are sent to OSV.dev for lookup; your PHP version is looked up on OSV.dev and endoflife.date.
1. composer.lock dependency check
Upload or paste composer.lock (max 2 MB). Each package version is checked against OSV.dev (GitHub advisories + FriendsOfPHP data for Packagist).
2. PHP version check (backport-aware)
Paste php -v output or the package version from dpkg -l 'php*' / apt policy php8.1-fpm, e.g. 8.1.2-1ubuntu2.18 or 8.2.20-1~deb12u1.