Composer Practices for Zend Framework 3 Apps

ZF3 lives and dies by Composer metadata. Before migrate, make the lockfile honest: PHP platform, abandoned packages, and plugins that will not survive a vendor/ wipe.

// LEGACY risk — platform pin hiding production truth
{
  "config": {
    "platform": { "php": "7.4.33" }
  }
}

# MODERN prep
composer validate
composer outdated
composer self-update
# ensure ≥ 1.7 for laminas-migration plugin features

• Resolve abandoned packages intentionally—see package abandoned
• Do not add laminas/laminas-migration to project require
• Expect migrate to remove composer.lock and vendor/; plan offline mirrors if needed

Tools: platform checker. Guide: ZF→Laminas.