phpcomposer-php

Can composer generate the `composer.lock` without actually download the packages?

It does exist a command to generate the composer.lock from a composer.json?

Something similar ruby's bundler : $ bundle lock

Solution

  • If you do not have a composer.lock

    The answer is "no", you have to generate the lock file using:

    composer install

    Installing Without composer.lock

    If you have never run the command before and there is also no composer.lock file present, Composer simply resolves all dependencies listed in your composer.json file and downloads the latest version of their files into the vendor directory in your project.

    Source: getcomposer.org

    NB Potential Issue: Without the lock file Composer will use the latest version of the dependencies.

    If you already have a composer.lock

    If you already have a composer.lock and Composer is complaining about it being out of sync, you'll see this warning:

    Warning: The lock file is not up to date with the latest changes in composer.json. You may be getting outdated dependencies. Run update to update them.

    To fix this you can update the lock file itself, without updating the dependencies. This will only update the content-hash in the lock file:

    composer update --lock

    From the Composer manual:

    --lock Only updates the lock file hash to suppress warning about the lock file being out of date.