Packagist.org metadata deprecation

[Seldaek]

You are using v1 metadata here https://github.com/aboutcode-org/purldb/blob/main/minecode/miners/packagist.py which is now deprecated, and readonly (i.e. no more updates/new versions/new packages) since Feb 1st.

We recommend using the v2 metadata instead as that is complete.

I am not sure what this repo needs the data for nor am I familiar with the code, I'm just a packagist.org maintainer trying to make sure our API consumers get notified.

[pombredanne]

@Seldaek Thank you ++ and straight from the horse mouth!

I am not sure what this repo needs the data for nor am I familiar with the code, I'm just a packagist.org maintainer trying to make sure our API consumers get notified.

This is to scan and match all composer packages and used as a reference for SBOMs.

[Seldaek]

Right, then I'd think you probably want to use the v2 metadata.. The minifier dependency we provide is only in PHP but the code is very small and should be easy to port to another language https://github.com/composer/metadata-minifier/blob/main/src/MetadataMinifier.php#L22-L46