Vikrant 28 May 2026 supply-chain Composer is getting package signing after 14 years PHP's dependency manager is rolling out cryptographic signatures. The timing matters more than the tech. Read post ↗