# composer-unused/composer-unused

Show unused composer dependencies by scanning your code

Repository: https://github.com/composer-unused/composer-unused
Canonical: https://ross.abutalabs.com/products/composer-unused
Language: PHP
License: MIT
License Family: permissive
Topics: composer, php, php-parser, hacktoberfest
Last push: 2026-04-27T02:02:52+00:00

## Health v2 (maintenance only)
Score: 75/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 79, release rhythm 56, longevity 100
- inputs: {"age_days": 2722, "days_push": 129, "days_rel": 215, "gap_med": 51.5, "n_releases_24m": 7}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1686, forks 57 (observed 2026-08-28T04:05:22.163689+00:00)

## What it is
composer-unused is a PHP CLI tool that scans your codebase to detect Composer dependencies that are never used. It reports packages listed in composer. whose symbols are not referenced anywhere in the project.

## Use cases
- find unused composer dependencies in my php project
- clean up composer. by removing packages that are no longer used
- audit which composer packages are actually referenced in the codebase
- check for dead dependencies before a refactor
- run a dependency usage scan in CI

## When to choose
- you maintain a large PHP repository and lost track of required packages
- you want a quick CLI scan rather than manual grep for package symbols
- you want to slim down composer. and reduce install size

## When to avoid
- your project is not PHP / does not use Composer
- you need runtime dependency analysis or dynamic usage detection (e.g. string-based class loading may be missed)
- you need a full dependency vulnerability audit rather than usage detection

## Facets
- artifact type: cli-tool
- maturity: active
- function: static-site-generator, developer-tools, parser
- domain: developer-tools
- platform: cli, php, cross-platform
- tags: composer, dependency-audit, php, static-analysis, unused-dependencies, command-line, automation

## Member repositories
- composer-unused/composer-unused (main) score 75

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:22.163689+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:38:56.265721+00:00, confidence not recorded.
  - readme: https://github.com/composer-unused/composer-unused (fetched 2026-08-28T04:05:22.163689+00:00, sha fb9d71dee13b)
- Data as of 2026-08-30T08:39:29.467469+00:00.