How PHP and Composer find your code
Recently I showed how to create an empty Packagist package.
By “empty”, I mean it doesn’t contain any code.
This is useless, so let’s start adding some code.
The package is jameshfisher/donut-logic
,
which is on Packagist.org at https://packagist.org/packages/jameshfisher/donut-logic.
The package is backed by a Git repository at https://github.com/jameshfisher/donut-logic.
To add the package as a dependency of your project, run
$ ./composer.phar require jameshfisher/donut-logic
This adds jameshfisher/donut-logic
to your composer.json
,
and puts the contents of the package under vendor/jameshfisher/donut-logic/
.
I want to add some code to this package so that,
from my project, I can use it as follows:
echo(\Jim\DonutLogic\DonutAdder::addDonuts(2, 3)); // prints "O"
In the above,
\Jim\DonutLogic
is a namespace name,
DonutAdder
is a class name,
and addDonuts
is a static method on that class.
When your code makes this call,
how does PHP find the implementation of \Jim\DonutLogic\DonutAdder::addDonuts
?
The standard answer is:
you must have defined it before you call it.
You can define addDonuts
in the lines above the method call,
but this can’t work for things defined in other packages.
Instead, you use include
/require
/require_once
,
which, given a filename, load the file as PHP.
Just ensure that you’ve included the file which defines \Jim\DonutLogic\DonutAdder::addDonuts
before you call it.
Using Composer,
you include the file by including your project’s vendor/autoload.php
:
require __DIR__ . '/vendor/autoload.php';
echo(\Jim\DonutLogic\DonutAdder::addDonuts(2, 3)); // prints "O"
The autoload.php
could work by include
ing all of your dependencies’ source files.
However, this is not how modern PHP works!
Instead, modern PHP uses a PHP feature called “autoloading”.
At runtime, when PHP encounters the use of a class which has not been defined,
it delegates the loading to an “autoloader”.
An autoloader is a standard PHP function
which is passed the name of a class,
and is expected to somehow define that class.
You can register your autoloader with
spl_autoload_register($my_autoloader_func)
.
There can be many autoloaders.
When our PHP requests to use \Jim\DonutLogic\DonutAdder
,
PHP realizes it’s not defined, and asks the autoloaders to define it.
There are lots of ways the autoloaders could do this, which would be chaos.
To avoid such chaos, the PHP community have defined PSR-4,
which says how an autoloader should find a file based on a class name.
One implementation of PSR-4 is Composer’s autoloader,
and that’s what vendor/autoload.php
defines.
PSR-4 says that the class DonutAdder
must be in a file DonutAdder.php
.
We’ll put the source file DonutAdder.php
in our package source repository at src/DonutAdder.php
,
so that Composer will install it at vendor/jameshfisher/donut-logic/src/DonutAdder.php
.
Then we must arrange for Composer’s autoloader to find the file at that location.
PSR-4 says that the file will be found in a directory determined by two things:
the namespace (\Jim\DonutLogic
),
and a mapping from namespace prefixes to “base directories”.
In our case, the namespace prefix \Jim\DonutLogic
must be mapped to the directory vendor/jameshfisher/donut-logic/src
.
Composer’s prefix-to-directory mapping is defined by dependencies’ composer.json
files.
I must extend the donut-logic
package’s composer.json
as follows:
{
"name": "jameshfisher/donut-logic",
"description": "Shared logic related to donuts",
"require": {},
"autoload": {
"psr-4": {"Jim\\DonutLogic\\": "src/"}
}
}
In src/DonutAdder.php
, we define the \Jim\DonutLogic\DonutAdder
class:
<?php
namespace Jim\DonutLogic;
class DonutAdder {
public static function addDonuts($a, $b) {
return "O";
}
}
In my example project, after a ./composer.phar update
,
the following code works:
require __DIR__ . '/vendor/autoload.php';
echo(\Jim\DonutLogic\DonutAdder::addDonuts(2, 3)); // prints "O"
Similar posts
How do I release a PHP Composer package?
To release a PHP Composer package, create a GitHub repo, add a composer.json
file, submit the package to Packagist.org, and tag a stable version. Then Composer users can require your package. 2017-11-06
The golden rule of PR reviews
The “golden rule” of code reviews is to approve improvements. Approve pull requests that fix bugs, even if the implementation isn’t ideal. 2023-10-07
Executables in npm?
NPM packages can contain executables, not just Node.js modules. NPM provides features to help distribute and run these executables, such as the bin
field in package.json
and the npm run-script
command. 2020-10-02
Why is the contentRect
of my NSWindow
ignored?
Calling setFrameAutosaveName
on an NSWindow
causes its size and position to be saved to user defaults, overriding the contentRect
passed to the constructor. To avoid this, do not call setFrameAutosaveName
. 2020-07-10
What is simulated annealing?
Simulated annealing is a variation of trial-and-error optimization that generates mutations of the current best guess, and gradually reduces the magnitude of the mutations over time, similar to how metals cool. 2019-05-28
Browser webcam hello world
Demo of the user’s webcam in a <video>
element, using the navigator.mediaDevices.getUserMedia()
API. 2019-05-06
More by Jim
What does the dot do in JavaScript?
foo.bar
, foo.bar()
, or foo.bar = baz
- what do they mean? A deep dive into prototypical inheritance and getters/setters. 2020-11-01
Smear phishing: a new Android vulnerability
Trick Android to display an SMS as coming from any contact. Convincing phishing vuln, but still unpatched. 2020-08-06
A probabilistic pub quiz for nerds
A “true or false” quiz where you respond with your confidence level, and the optimal strategy is to report your true belief. 2020-04-26
Time is running out to catch COVID-19
Simulation shows it’s rational to deliberately infect yourself with COVID-19 early on to get treatment, but after healthcare capacity is exceeded, it’s better to avoid infection. Includes interactive parameters and visualizations. 2020-03-14
The inception bar: a new phishing method
A new phishing technique that displays a fake URL bar in Chrome for mobile. A key innovation is the “scroll jail” that traps the user in a fake browser. 2019-04-27
The hacker hype cycle
I got started with simple web development, but because enamored with increasingly esoteric programming concepts, leading to a “trough of hipster technologies” before returning to more productive work. 2019-03-23
Project C-43: the lost origins of asymmetric crypto
Bob invents asymmetric cryptography by playing loud white noise to obscure Alice’s message, which he can cancel out but an eavesdropper cannot. This idea, published in 1944 by Walter Koenig Jr., is the forgotten origin of asymmetric crypto. 2019-02-16
How Hacker News stays interesting
Hacker News buried my post on conspiracy theories in my family due to overheated discussion, not censorship. Moderation keeps the site focused on interesting technical content. 2019-01-26
My parents are Flat-Earthers
For decades, my parents have been working up to Flat-Earther beliefs. From Egyptology to Jehovah’s Witnesses to theories that human built the Moon billions of years in the future. Surprisingly, it doesn’t affect their successful lives very much. For me, it’s a fun family pastime. 2019-01-20
The dots do matter: how to scam a Gmail user
Gmail’s “dots don’t matter” feature lets scammers create an account on, say, Netflix, with your email address but different dots. Results in convincing phishing emails. 2018-04-07
The sorry state of OpenSSL usability
OpenSSL’s inadequate documentation, confusing key formats, and deprecated interfaces make it difficult to use, despite its importance. 2017-12-02
I hate telephones
I hate telephones. Some rational reasons: lack of authentication, no spam filtering, forced synchronous communication. But also just a visceral fear. 2017-11-08
The Three Ts of Time, Thought and Typing: measuring cost on the web
Businesses often tout “free” services, but the real costs come in terms of time, thought, and typing required from users. Reducing these “Three Ts” is key to improving sign-up flows and increasing conversions. 2017-10-26
Granddad died today
Granddad died. The unspoken practice of death-by-dehydration in the NHS. The Liverpool Care Pathway. Assisted dying in the UK. The importance of planning in end-of-life care. 2017-05-19
How do I call a program in C, setting up standard pipes?
A C function to create a new process, set up its standard input/output/error pipes, and return a struct containing the process ID and pipe file descriptors. 2017-02-17
Your syntax highlighter is wrong
Syntax highlighters make value judgments about code. Most highlighters judge that comments are cruft, and try to hide them. Most diff viewers judge that code deletions are bad. 2014-05-11
Want to build a fantastic product using LLMs? I work at
Granola where we're building the future IDE for knowledge work. Come and work with us!
Read more or
get in touch! This page copyright James Fisher 2017. Content is not associated with my employer. Found an error? Edit this page.