🤝
Make a deal with packagist
🔒 Paid proposals held safely in escrow — released only when the work's approved.
Followers
738
Account age
3 yrs
💰 Suggested sponsorship rate
$40 – $65 / sponsored post
Estimated from audience size & typical reach — every deal is negotiable and held in SocialDB escrow.
🧰 Free analysis for packagist
📊 Post engagement
31
Avg engagement / post
4.2%
Engagement vs followers
Oct 2022
On Mastodon since
🔥 Top post: 📌 Stable versions on Packagist are now immutable. Once a version · 97 likes + reposts
📊 Activity & format
Posting cadence
1.2 / week
A lower-frequency account — each post lands with more weight.
Content mix
Mostly text
Recent: 11 text · 1 image · 0 video.
Follower / following
246×
Follows 3 back. A strong ratio — an audience that follows them, not a follow-for-follow network.
Recent posts
View on Mastodon ↗
Composer & Packagist now have a formal sponsorship program. Thank you to our launch sponsors 🤝 Aikido, AWS, Socket, Bunny, Upsun, Sonatype, Tideways, Datadog and Algolia.
Our costs are primarily staff: operations, support, emergency respon…
We're excited to announce @upsun is now sponsoring Composer & Packagist maintenance, operations and development! Upsun is a great platform to run PHP applications and they have a long history in the PHP ecosystem. Their contribution helps …
CI/CD pipelines are a prime target for supply chain attacks. We hardened the GitHub Actions workflows for Composer, Packagist and Private Packagist with zizmor, a static analysis tool for GitHub Actions. 🌈
Our new blog post covers what ziz…
We’re sponsoring Meet Magento Germany on Oct 22, 2026 in Mainz, Germany. Come meet our founder @naderman to talk software supply chain security and answer your questions.
Tickets available, CFP open: https://de.meet-magento.com/
#meetmagen…
🧩 Composer plugins are powerful, but execute code during install & update. Composer prompts to allow a plugin, but a distracted "yes" or an AI agent on autopilot is all it takes. Private Packagist now has org-level allowlists for plugins.
…
The Composer CLI is part of your supply chain. Older versions miss the protections shipped in 2.10 (dependency policies, malware feed integration, source fallback off by default) and carry known client-side CVEs.
Private Packagist customer…
⛔ Composer dependency policies block flagged malware by default, but only on 2.10. A project disabling the policy, or a CI image running Composer 2.4, still installs flagged versions normally until we can manually pull it from Packagist.
P…
🛡️ Blog: How Composer's download fallback behavior can silently override security decisions at the repository side, and what we are doing about it.
If Private Packagist refuses to serve a malware-flagged version, Composer can fall back to …
🔒 An update on Composer & Packagist supply chain security:
Covering what's in place today, what ships this week with Composer 2.10 (dependency policies, stable version immutability), what's coming next (mandatory MFA, minimum-release-age p…
We recommend you change the default permissions for GitHub Actions GITHUB_TOKENs to read only. Explicitly grant elevated permissions only where strictly necessary. Use zizmor to analyze your GitHub Actions: https://github.com/zizmorcore/zi…
RE: https://phpc.social/@packagist/116566852406125489
If you haven't updated Composer to 2.9.8 or 2.2.28 (LTS), do so urgently! GitHub will restart the rollout of their new GitHub Actions tokens later today. They've improved secret masking…
We recommend you change the default permissions for GitHub Actions GITHUB_TOKENs to read only. Explicitly grant elevated permissions only where strictly necessary. Use zizmor to analyze your GitHub Actions: https://github.com/zizmorcore/zi…
RE: https://phpc.social/@packagist/116566852406125489
If you haven't updated Composer to 2.9.8 or 2.2.28 (LTS), do so urgently! GitHub will restart the rollout of their new GitHub Actions tokens later today. They've improved secret masking…
🐘 Community & instance
Home server
phpc.social
Their home server on the fediverse — the instance a creator picks signals the community they belong to.
On Mastodon since
Oct 2022
Joined in the Twitter-exodus wave of late 2022 — part of the migration that made Mastodon a real destination.
💡 Facts
🗓️Joined Mastodon in 2022 — 3 years ago.
👁️Averages 31 views per post.
📤Posts about 1.2× per week.
🛡️ Audience credibility
80/100
Excellent
Credibility score
97%
Real
Real audience
Low
Fake-follower risk
High
Data confidence
- Est. 97% real, active audience · Low fake-follower risk.
- Strong engagement (~4.2% of followers engage each post) — an active, real audience.
- Established account (3+ years old).
Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.
About
PHP Package Repository for #ComposerPHP (https://getcomposer.org). See https://packagist.org for open source, https://packagist.com for private packages.
🔀 Audience overlap
EstimatedEstimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.
armadillosoft
18%
Jude🇵🇸
18%
Lukas Daniel Klausner
17%
Marty Cormack
17%
Nicolas Folliot🔻
14%
Santiago Andrés Triana
10%
More like this
Find more →
Mastodon
armadillosoft
@armadillosoft@mastodon.social
738
Followers
Mastodon
Lukas Daniel Klausner ✓
@l17r@chaos.social
738
Followers
Mastodon
Nicolas Folliot🔻 ✓
@nicolasfolliot@dice.camp
738
Followers
Mastodon
Marty Cormack
@martycormack@urbanists.social
738
Followers
Mastodon
Santiago Andrés Triana ✓
@repepo@fediscience.org
738
Followers
Mastodon
Jude🇵🇸
@sister_ratched@toot.community
738
Followers
✉ Message packagist
Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.
- ✓ Message any influencer from their listing
- ✓ The influencer gets notified by email
- ✓ Manage every conversation in one inbox
Already Pro? Log in.
🎤 Event / appearance with packagist
Booking an event / appearance is a Pro feature. Upgrade to book packagist for an in-person or virtual appearance — payment held safely in escrow until the event is done.
- ✓ Book them for events, livestreams, panels & more
- ✓ packagist gets notified by email
- ✓ Fee held in escrow, released after the appearance
Already Pro? Log in.
🚀
You're out of free requests this month
Free accounts get 5 per month. Go Pro for unlimited sponsor pitches, collab requests & sponsorship deals — plus featured placement, the Verified badge, free withdrawals and more.
Upgrade to Pro — $9.95/mo →Your free limit resets on the 1st of next month.