Private Packagist
GhostThis blog from the company behind Private Packagist covers the history and sustainability of Composer and Packagist.org, along with product updates on supply chain security, token handling and audit logging. It mixes company news, release announcements and sponsorship calls, which are useful for PHP teams running Composer at scale.