A while back I shared a way to show outdated composer packages. Today, I want to expand on it a little bit. Thanks to this tweet:
#ProTip In your #PHP application add "composer show -mlDo –strict" to your build pipeline to let your build fail when there are outdated dependencies. You could for example only run it in feature branches to make sure your team keeps the dependencies up-to-date.
— Walter Tamboer (@waltertamboer) November 5, 2018
I think it’s slightly easy to remember with “composer show -molD -strict” (“old”, “mold”). Adding this to the test suite is a great tip too!
For other ways to show the outdated packages (using composer plugins), have a look at this StackOverflow thread.