<?xml version="1.0" encoding="UTF-8" ?> <?xml-stylesheet type="text/xsl" href="rss.xsl"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/"> <channel> <title>lockrot</title><description>Find abandoned, unmaintained and branch-pinned packages in composer.lock. Composer plugin and PHAR with evidence, priority, baseline and CI exit codes.</description><link>https://lockrot.dev/</link><atom:link href="https://lockrot.dev/feed_rss_updated.xml" rel="self" type="application/rss+xml" /> <managingEditor>Igor Pinchuk</managingEditor><docs>https://github.com/somework/lockrot</docs><language>en</language> <pubDate>Sat, 19 Sep 2026 20:57:29 -0000</pubDate> <lastBuildDate>Sat, 19 Sep 2026 20:57:29 -0000</lastBuildDate> <ttl>1440</ttl> <generator>MkDocs RSS plugin - v1.19.0</generator> <image> <url>None</url> <title>lockrot</title> <link>https://lockrot.dev/</link> </image> <item> <title>What composer audit --abandoned misses in 31 PHP projects</title> <author>Igor Pinchuk</author> <category>Dependency rot</category> <description>129 packages in 31 open-source PHP projects are abandoned, archived or five years silent. composer audit --abandoned reports 62, and the lock file explains why.</description> <link>https://lockrot.dev/blog/2026/09/19/composer-audit-abandoned-misses/</link> <pubDate>Sat, 19 Sep 2026 20:57:30 +0000</pubDate> <source url="https://lockrot.dev/feed_rss_updated.xml">lockrot</source><guid isPermaLink="true">https://lockrot.dev/blog/2026/09/19/composer-audit-abandoned-misses/</guid> </item> </channel> </rss>