> For the complete documentation index, see [llms.txt](https://docs.sealsecurity.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.sealsecurity.io/setup-apps-os/artifact-server/configuring-package-managers/composer.md).

# Configuring Composer

Composer configures package sources through the `composer config` command. The Seal source replaces the default Packagist repository, and authentication is set separately as an HTTP Basic credential.

## Configuration

From the project root, run:

```bash
# Configure the Seal repository as the default
composer config repos.packagist composer https://packagist.sealsecurity.io/

# Configure HTTP Basic credentials for the Seal host
composer config --auth http-basic.packagist.sealsecurity.io <project-id> <token>
```

Replace `<project-id>` with the Seal [Project ID](/getting-started/creating-a-seal-project.md#project-id-and-project-name) and `<token>` with your production token.

The first command writes the repository to the project's `composer.json`. The second writes the credentials to `auth.json` (project-local) or `~/.composer/auth.json` (global). Keep `auth.json` out of version control.

## Verify

A clean `composer install` resolves packages from `packagist.sealsecurity.io`. Run with `-v` to see the URL Composer is fetching from.

## Related

* [Editing dependency files manually](/using-platform/working-with-seal-apps/artifact-server/composer.md): pinning sealed versions in `composer.json`.