2018 年 4 月 13 日，Composer 团队发布了 v1.6.4 版本，其中包含了一个安全修复，因此鼓励所有用户升级。根据 Jordi Boggiano，本次升级还包括将近 200 个问题的诊断/合并/修复，你可以在 Github release page 看到所有的变更。

Below is a highlight of the changes:

• Security fixes in some edge case scenarios, recommended update for all users
• Fixed regression in version guessing of path repositories
• Fixed removing aliased packages from the repository, which might resolve some odd update bugs
• Fixed updating of package URLs for GitLab
• Fixed run-script --list failing when script handlers were defined
• Fixed init command not respecting the current php version when selecting package versions
• Fixed handling of uppercase package names in why/why-not commands
• Fixed exclude-from-classmap symlink handling
• Fixed filesystem permissions of PEAR binaries
• Improved performance of subversion repos
• Other minor fixes

To get this latest version the Composer CLI tool includes a self-update command and you can run the following:

composer self-update

For complete details visit the v1.6.4 release page.

原文地址：https://laravel-news.com/composer-v1-6-4...

译文地址：https://lmonkey.com/laravel/t/10213/comp...