PHAST - This is so coool. It is very fast. Dependency manager for PHP.
Written in Rust, it reads your existing composer.json, so trying it out is just:
phast install.
Two things tripped me up on a real Laravel project, though:
- Private GitHub repos fail with a 404. Phast ignores the github-oauth key from Composer's auth.json. The token has to go into ~/.phast/auth.toml under [github-token].
- Version parsing is stricter than Composer's. A transitive package had the constraint ^8.1-@dev. Composer accepts it, Phast 0.1.0 fails with invalid version segment, and the install stops there.
It also doesn't read composer.lock. It resolves everything from scratch into its own phast.lock, so you can land on different versions than the ones you ship.
Very promising, but at 0.1.0 not ready to replace Composer on a production project.