Download the PHP package kistn/php-client without Composer
On this page you can find all versions of the php package kistn/php-client. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Informations about the package php-client
kistn/php-client
PSR-18 PHP client for the Kistn API. Framework-agnostic — requires any PSR-18 HTTP client and PSR-17 HTTP factory.
Installation
Requires a PSR-18 HTTP client (e.g. guzzlehttp/guzzle) and PSR-17 factory.
Usage
Standalone
Copy kistn.config.php.example to kistn.config.php and fill in your credentials:
Lock file upload (transmit_composer_files / transmit_npm_files)
Every push sends the package inventory (names, versions, dependency flags) and your local audit findings.
Your lock and manifest files (composer.lock, composer.json, installed.json, package-lock.json, package.json)
are not uploaded unless you opt in:
| Value | Behaviour |
|---|---|
false (default, also used for missing/invalid values) |
No files are uploaded. |
true |
Upload the files whenever the package list changed. |
'on-demand' |
Upload only when composer / npm is unavailable locally, so the server can run the audit instead. |
Uploaded files let the Kistn server run its own audit and cross-check your local findings. They contain your full dependency tree, so enable this only if you are fine sharing that data with the server.
Wire up and push:
Push Flow
- GET all ecosystem hashes — one call (
GET /hashes), always runs. - Per ecosystem: check local lock-file hash against local cache — skip collection if unchanged.
- Collect packages via
composer show --format=json/npm list --json. - Compute content hash — skip ecosystem if matches server.
- POST bundled payload (all changed ecosystems in one call).
- Upload lock files for ecosystems with package-level changes — only if enabled via
TransmitMode(off by default). - Store lock-file hash per ecosystem in local cache.