Sushil Kumar

@CodeWithSushil
5 Followers
34 Following
79 Posts
A self-taught 🕸️ Web Developer 👨🏻‍💻 || Linux 🐧 Lover || Open source 🌐 contributor 👥 || PHP/Laravel 🐘 and JS fanboy👦🏻
InstagramCodeWithSushil
GithubCodeWithSushil
X/TwitterCodeSushil
Websitecodewithsushil.github.io
🛡️ Blog: How Composer's download fallback behavior can silently override security decisions at the repository side, and what we are doing about it.
If Private Packagist refuses to serve a malware-flagged version, Composer can fall back to the original GitHub URL, or even clone from source. Two new Private Packagist options close both fallback paths, regardless of the Composer version your developers and CI happen to be running.
https://blog.packagist.com/closing-composers-download-fallback-paths-in-private-packagist/
#php #phpc #composerphp
Closing Composer's Download Fallback Paths in Private Packagist

This is the next post in our supply chain security series, following the supply chain security update and the Composer 2.10 release. Each post in this series covers a specific Composer behavior worth understanding, and a Private Packagist feature we are introducing on top of it. Today: How Composer's

Private Packagist

PHP doesn't have an image problem in 2026. It has a tutorial problem.

Too many "learn PHP" articles still teach PHP 5.6 and PHP 7.x patterns while modern PHP has evolved dramatically.

Today’s PHP means:
Strict Types
Enums
Attributes
Readonly Classes
Property Hooks
Dependency Injection
Composer
Modern Testing

If your tutorial still uses mysql_*, no namespaces, and no Composer, you're learning PHP history—not modern PHP.

The PHP ecosystem deserves more up-to-date educational content.

#PHPC

introducing laravel moat

as an open source maintainer, recent supply chain attacks in the ecosystem made me want a simple cli to audit the security of my GitHub organizations and repositories

built in Rust. for any open source project on GitHub

Most developers think Express.js is a framework, but it’s actually a library. Express itself is unopinionated. A true framework usually enforces an architecture like MVC or HMVC with predefined patterns and structure for developers to follow.

#Nodejs #JavaScript #ExpressJs #TypeScript #webdevelopment

I have a question for JavaScript/Node.js developers:

Why doesn’t the JavaScript ecosystem have a framework like Ruby on Rails, Django, or Java Spring Boot — or even something close to Laravel in PHP ?

no one say: Express.js most downloaded library.

#php #phpc #laravel #ruby #java #nodejs #python #javascript #spring #springboot #rails #rubyandrails #typescript #expressjs #webdev #django

Finally Generics coming in PHP 9 🎉

#php #generics #php9 #phpGenerics

JetBrains PHPverse 2026 is returning on June 9th, bringing together PHP developers worldwide for a free online event. The conference runs from 11:00 to 17:50 UTC and features talks from prominent voices across the PHP ecosystem.

https://laravel-news.com/phpverse-2026-returns-june-9th

I did it. Finally. I tested out NativePHP. It absolutely blew my mind.

If you are a mobile developer that gets regularly driven up the wall by #Kotlin, or #Flutter or #Swift... you can pretty quickly now just learn #Laravel #php.

https://developer.vonage.com/en/blog/weird-science-building-android-apps-with-nativephp

Weird Science: Building Android Apps with NativePHP

Discover the new power of PHP mobile development with NativePHP

Vonage API Developer

RE: https://hachyderm.io/@itworldcup/115926604229775228

It'd be lovely if you could show your support!

♥️

A common issue in the PHP ecosystem isn’t the language itself — it’s the hosting environment.

Many hosting providers offer shared hosting powered by Apache, but the server is often poorly configured. Without proper tuning (MPM settings, OPcache, keep-alive, compression, etc.), even well-written PHP applications can feel slow.

Performance problems are frequently blamed on PHP, while the real bottleneck is misconfigured infrastructure.

Good configuration can make a huge difference.

#php #phpc