dominikb/composer-license-checker

3.0.0 - 2026-04-08

The major version was increased because of upgrades to the minimum required PHP version and other packages.

In practise, this upgrade should not require any changes on your end.

Added

• Support for PHP 8.4 and PHP 8.5. (#49, #55)
• Allow files for --allowlist and --blocklist to be passed as arguments. (#51)
• Add init command to create a .allowed-licenses file for currently installed dependencies. (#51)

Changed

• Increase minimum required versions of guzzlehttp/guzzle to 7.4.5
• Increase minimum required versions of symfony/css-selector and symfony/dom-crawler to major version 6 or 7

Removed

• Dropped support for PHP 7, PHP 8.0 and PHP 8.1. (see: supported versions)

Thanks to: Atesca, Jan-Walther-Basilicom, konradmichalik

Full Changelog: 2.7.0...3.0.0

The major version was increased because of upgrades to the minimum required PHP version and other packages.

In practise, this upgrade should not require any changes on your end.

Added

• Support for PHP 8.4 and PHP 8.5. (#49, #55)
• Allow files for --allowlist and --blocklist to be passed as arguments. (#51)
• Add init command to create a .allowed-licenses file for currently installed dependencies. (#51)

Changed

• Increase minimum required versions of guzzlehttp/guzzle to 7.4.5
• Increase minimum required versions of symfony/css-selector and symfony/dom-crawler to major version 6 or 7

Removed

• Dropped support for PHP 7, PHP 8.0 and PHP 8.1. (see: supported versions)

Thanks to: Atesca, Jan-Walther-Basilicom, konradmichalik

2.7.0 - 2024-01-26

Added

• Add option for --no-dev flag to ignore dev-only dependencies when checking licenses. (#48)

Changed

• Dependencies without a specified license will now be grouped under the license none. Those dependencies can be allowed/blocked by specifying the none license in either list. (#45)

Thanks to: ildyria and tourze

New Contributors

• @ildyria made their first contribution in #47

Full Changelog: 2.6.0...2.7.0

Added

• Add option for --no-dev flag to ignore dev-only dependencies when checking licenses. (#48)

Changed

• Dependencies without a specified license will now be grouped under the license none. Those dependencies can be allowed/blocked by specifying the none license in either list. (#45)

Thanks to: ildyria and tourze

Added

• Add documentation on exit codes to expect from any composer-license-checker command. (#41)
• Verify the exist code of the internal call to composer licenses to determine if the command was successful. (#41)

Changed

• Improve type documentation and clean up composer.json configuration. (#40)

Thanks to: SvenRtbg

Full Changelog: 2.5.1...2.6.0

Added

• Add documentation on exit codes to expect from any composer-license-checker command. (#41)
• Verify the exist code of the internal call to composer licenses to determine if the command was successful. (#41)

Changed

• Improve type documentation and clean up composer.json configuration. (#40)

Thanks to: SvenRtbg

Changed

• Use JSON format when generating output with composer licenses instead of parsing text output. (#33)

Changed

• Use JSON format when generating output with composer licenses instead of parsing text output. (#33)

Added

• Add support for Symfony 7. (#32)

Thanks to: keulinho

Added

• Add support for Symfony 7. (#32)

Thanks to: keulinho

Change

• Update required composer version to mitigate CVE exposure. (#29)

Thanks to: phansys

Change

• Update required composer version to mitigate CVE exposure. (#29)

Thanks to: phansys

Change

• Update integration with tldrlegal to work with their new website.

Change

• Update integration with tldrlegal to work with their new website.

Change

• Use --dev flag in documentation for installing the package.
• Fix deprecation warning (#24)

Thanks to: manavo

Added

• --show-packages and --grouped options for the report command (#22)
• --filter to restrict queried and displayed licenses (#22)

Thanks to: dkemper

Change

• Composer: allow for psr/simple-cache versions 2 and 3
• Allow for v6 of all symfony dependencies

Change

• Composer: allow for psr/simple-cache versions 2 and 3
• Allow for v6 of all symfony dependencies

Added

• --allow option to always allow a specific package or author/vendor

Added

• Support for PHP 8

Changed

• Upgrade PHPUnit major version from 7 to 9
• Upgraded several dependencies to work with newer PHP versions. Major version bump includes symfony/dom-crawler.

Removed

• Dropped support for PHP 7.1 and 7.2 (see: supported versions)

Changed

• Terminology for black/whitelist changed to block/allowlist (This changes the CLI interface of the CheckCommand )
• Command classes now return an integer exist code

Added

• Added Scrutinizer code coverage

Changed

• Fixed path to autoloader when installed with composer

Removed

Initial Release

Added

• check and report commands
• summary lookup on tldrlegal
• caching of lookups

Changed

Removed