Philipp Scheit
pscheit.bsky.social
Philipp Scheit
@pscheit.bsky.social
Web-Developer
I am so tired...

Tested an deactivated encharge flow for an hour...

:facepalm:
November 18, 2025 at 7:08 PM
Reposted by Philipp Scheit
New in Private Packagist: Usage Tracking can now help prioritize security updates by showing how deps cascade through projects and where vulnerable versions are used. Trusted Publishing for GitHub Actions and better synchronization setup. blog.packagist.com/whats-new-in... #php #phpc #composerphp
What’s New in Private Packagist, November Update
We've shipped several important updates to Private Packagist over the past three months, including more insights on the package usage tracking page, the introduction of Trusted Publishing for secure a...
blog.packagist.com
November 18, 2025 at 9:35 AM
Reposted by Philipp Scheit
After Composer 2.9 CLI security improvements, we're working on a transparency log for Packagist to strengthen PHP supply chain security, funded by the @sovereign.tech with help of the @thephpf.bsky.social and Private Packagist. Details at blog.packagist.com/strengthenin... #php #phpc #composerphp
Strengthening PHP Supply Chain Security with a Transparency Log for Packagist.org
The release of Composer 2.9 this week introduced new security features on the Composer CLI client, which were funded by Private Packagist through service subscriptions. But in parallel, we are working...
blog.packagist.com
November 14, 2025 at 3:35 PM
Reposted by Philipp Scheit
Composer 2.9 is here! 🚀 It automatically blocks packages with known vulnerabilities, has a new repository command to manage repos from the CLI, and lots more!

blog.packagist.com/composer-2-9/
#composerphp #phpc #PHP
Composer 2.9 Release
We are pleased to announce the release of Composer 2.9.0, bringing improvements to security, repository management from the CLI, and lots more. Automatic Security Blocking Composer now automaticall...
blog.packagist.com
November 13, 2025 at 10:22 AM
Someone told me lately, that the typing speed is not relevant - and that's why they wouldn't see the need for AI.

97 files
3406 lines added
1892 lines removed

All TDD, all DDD, in one day. Semi interactive build with Claude and Claude-Skills.
October 26, 2025 at 6:11 AM
Claudes most annoying sentences:

These failures are unrelated to my changes.

You're absolutely right
October 25, 2025 at 3:48 PM
After 5 years DDD I finally get to understand BoundedContexts in practice.

This was a crazy journey!
October 25, 2025 at 2:50 PM
Hehe, have you ever "copied code from another project" the TDD style?

Teaching this to Claude right now.. Never thought that this is something special I do.

You still begin with an empty class and see what you need to copy - line by line - improve it along the way.
October 18, 2025 at 5:51 AM
MIch wundert nix mehr, der Klassenlehrer so:

Bitte geben Sie Ihrem Kind nach Möglichkeit einen Löffel, ein Schälchen und eine Küchenreibe mit.
October 15, 2025 at 3:36 PM
Does someone know why Claude thinks i am "You are absolutely right!"

Maybe I am but not all the time? Feels like its just brabbling along with whatever shit I come up with?

Is it because it wouldn't do "what i want"? So its baked in? "Always trust the user"? how is this done scientifically?
October 13, 2025 at 3:48 PM
I am gonna teach you real TDD! If you like it or not..

Claude: 🫢

It's getting there.. it's getting there.

I just have to reject the code now and just write "TDD" then Claude usually knows whats up :D

"Oh right, i did not see the test failing FIRST, let me run it..."
October 3, 2025 at 7:56 AM
Reposted by Philipp Scheit
Bitbucket Cloud is retiring app passwords in favor of API tokens. If you're using Private Packagist with Bitbucket Cloud, migrate now to avoid future disruptions.

Our blog post explains it step-by-step: blog.packagist.com/bitbucket-de...

#php #composerphp #phpc #privatepackagist #bitbucket
Bitbucket deprecated App Passwords
Bitbucket announced that they deprecated app passwords in favor of their new API token system. This change affects organizations using Private Packagist with Bitbucket Cloud (bitbucket.org) workspace ...
blog.packagist.com
September 26, 2025 at 11:50 AM
Reposted by Philipp Scheit
Together with PyPI, Maven Central, cratesio and other major package registries we signed a statement on sustainable open source infrastructure.
3B+ installs/month and evolving #composerphp and packagist.org requires sharing the costs.
#phpc #php
Registries like PyPI, Maven Central & crates.io power the ecosystem.

They can’t run on goodwill alone.

OpenSSF endorses the Joint Statement on Sustainable Stewardship.

👉 openssf.org/blog/2025/09...

#PreserveOpenSource
September 23, 2025 at 1:42 PM
Its called the 1,2,3 rule
1 thing will go wrong (at least)
2 trips to the hardware store / team manager
3 times as long as you planned

:)
September 16, 2025 at 3:01 PM
Könnt ihr hier:

a) mir sagen warum die Schnittstelle obsolete ist, und was man anstelle dessen nutzen soll? (spoiler: ich weiß es schon ...)
b) den Cookie banner wegclicken?

www.bzst.de/DE/Unternehm...

Man beachte: das ist eine OFFIZIELLE Seite unseres Landes

#digitalisierung-ist-neuland
Weitere Informationen zur Schnittstelle
www.bzst.de
September 16, 2025 at 2:34 PM
Someone doing eventsourcing with #PHP ?

Do you use a framework?
August 6, 2025 at 8:47 AM
I remember failing hard when figuring this out, and now Claude did fail hard at it again - i am not alone.

The filter_query[username][is]=my-user-name

returns all stories. It becomes clear when you read the docs but boy. This is unintuitive!

@storyblok.com
August 6, 2025 at 2:56 AM
Reposted by Philipp Scheit
Good morning / happy Friday
August 1, 2025 at 12:36 PM
I love startups.

"Any chance you can bump up my pre-order? The kids are waiting desparately for it"
"yeah sure, I put your shipping label on the top of the stack"

fasttracktennis.eu
FastTrackTennis
-the ultimate training tool -the ultimate ball machine -for all levels (beginner to advanced) -no picking up balls and up to 1200 hits per hour
fasttracktennis.eu
August 1, 2025 at 4:37 PM
Wer von euch Knallköppen hat eigentlich die eVatR Rest-Api die "neue" API vom bff gebaut?

Ich muss ja nur diese YAML posten...
api.evatr.vies.bzst.de/api-docs
api.evatr.vies.bzst.de
July 31, 2025 at 12:54 PM
Reposted by Philipp Scheit
What's a time tracking process that works for you? I regularly for get to end or switch what I'm tracking, despite it being pretty easy and on web as well as my phone. What tools do you prefer and how did you fix this problem? Are there analogue devices that help keep this present at all times?
June 25, 2025 at 11:53 AM
Reposted by Philipp Scheit
Arrived in Denver for #Laracon - look forward to meeting everyone at our @packagist.com booth! Would love to talk to everyone about how you use Composer, handle updates and apply security patches, or anything else relating to dependency management! #laraconus #laravel #phpc
July 28, 2025 at 9:44 PM
The worst thing you can do as a support agent:

Don't be able to tell the kind of customer you are talking with. If you are missing
MRR, CLTV, how many contracts they have, Number of Orders, company size, etc...

You will likely think twice if you send the default answer to them?
July 29, 2025 at 3:46 AM
Uh, be careful on discogs.com

this seems to be a new scam, almost fell for it.
The scammy user starts an order, then cancels it and sends this message, as it looks like it came from discogs.
Even the url mentions discogs.

But thats a scam, dont click the link. Discogs removed the user.
July 29, 2025 at 3:42 AM
So Claude was trained on the behaviour of a lot of developers.

Is this the reason it goes like:

oh the test fails...
this is likely do to the test setup

and states:

"Successfully changed everything" :D
July 27, 2025 at 6:28 AM