Module layout 

Where each package of the lock gets installed: vendor/<name>[/<target-dir>] by LibraryInstaller, or the path composer/installers gives it when that plugin is locked, allowed (config.allow-plugins) and ported (installers::table_for). A single pass, before touching the disk; anything not reproducible byte for byte becomes an issue (falls back to Composer).

The path is relative to the project root and normalised (normalizePath, no trailing slash); that is the form Composer normalises before computing install-path (FilesystemRepository::write).

Structs

Layout

Enums

PluginVerdict

allow-plugins verdict for a package, like PluginManager in non-interactive mode.

Functions

global_allow_plugins

config.allow-plugins from COMPOSER_HOME/config.json.

merged_allow_plugins

Config::merge for allow-plugins: the project value replaces the global one unless both are objects, in which case array_merge($project, $global, $project): the project keys first, in their order, then those only the global config brings. Order matters: the first matching rule decides.

plugin_allowed

Verdict for package under the project config merged with the global one.