Reading the metapackage #

This page is for developers who want to know exactly what a DXP project installs and why. It walks through the two composer.json files that define a project: the metapackage se7enxweb/exponential-platform-dxp and the skeleton se7enxweb/exponential-platform-dxp-skeleton.

Contents #

1. Two files, two jobs
2. The metapackage, section by section
3. The skeleton, section by section
4. Questions the files answer
5. Reading them on your own project

Two files, two jobs #

The metapackage, section by section #

require. PHP >=8.3, ext-ctype and ext-iconv, then four groups:

• the content packages (se7enxweb forks and upstream ibexa/* packages), grouped on What the DXP ships;
• Symfony 7.4 components and bundles (symfony/framework-bundle, symfony/security-bundle, symfony/form, symfony/mailer, symfony/twig-bundle, symfony/webpack-encore-bundle and others);
• Doctrine (doctrine/doctrine-bundle, doctrine/doctrine-migrations-bundle);
• tooling bundles (lexik/jwt-authentication-bundle, overblog/graphiql-bundle, knplabs/knp-menu-bundle, friendsofsymfony/jsrouting-bundle, monolog/monolog, twig/extra-bundle).

Several content packages are required at a development branch (for example ~5.0.x-dev); the se7enxweb forks are required at tagged versions where one exists (se7enxweb/admin-ui ^5.0.5.0, se7enxweb/exponential-platform-dxp-core ^5.0.1.0).

conflict. Known bad versions that Composer must never install, for example doctrine/doctrine-bundle 2.6.3, lexik/jwt-authentication-bundle 2.12.0 || 2.18.0 and symfony/webpack-encore-bundle 1.14.0. Do not remove them in your project.

license. (GPL-2.0-or-later or proprietary) (Licensing).

extra.branch-alias. dev-master is aliased to 1.3.x-dev.

The skeleton, section by section #

require. PHP >=8.3, the extensions ctype, iconv, gd, curl, json, xsl, xml, intl, mbstring, then se7enxweb/exponential-platform-dxp at dev-master, symfony/flex, symfony/runtime and nyholm/psr7. require-dev adds the Symfony debug bundle, stopwatch and web profiler.

config.allow-plugins. Only ibexa/post-install, symfony/flex and symfony/runtime may run as Composer plugins; every other plugin is refused ("*": false). Keep this list short in your project.

autoload. Your code lives under the App\ namespace in src/, tests under App\Tests\ in tests/.

scripts. After install and update, cache:clear and assets:install --symlink --relative run automatically.

extra.symfony.endpoint. Flex reads recipes from the ibexa/recipes index, from se7enxweb/sevenx-recipes and from the Flex defaults. The recipes write your configuration under config/ (sevenx-recipes).

minimum-stability and prefer-stable. The skeleton sets minimum-stability to dev and prefer-stable to false, because several packages are required at development branches. Before a production release, decide which packages you pin to tags in your own composer.json and commit composer.lock (Updating).

conflict. symfony/symfony is in conflict: install Symfony as separate components, never the monolith.

Questions the files answer #

Reading them on your own project #

composer show se7enxweb/exponential-platform-dxp      # version installed and its requirements
composer depends ibexa/rest                           # who requires a package
composer why-not php 8.2                              # why an older PHP is refused
composer outdated "se7enxweb/*"                       # newer releases of the forks

Related pages #

• The se7enxweb forks and replace
• Platform package map
• exponential-platform-dxp release notes
• Free documentation: this page is free to copy, translate and improve under the GNU FDL 1.3.