This is presented by Pairote Rojanaphusit, CEO, Netway Communication at Laravel Meet Up, the 1st Laravel Gathering in Thailand. Please visit www.rvsitebuilder.com or www.dev.rvsitebuilder.com for more info.

2. Modern Web Development
with
Laravel | Composer NPM
Webpack

3. Who am I?

5. What is it?
• Vendor Dependency Management
• PHP Code Autoloader
• Security Management
• Extra Script
• Development Environment

6. It is a backend
development work flow

7. Why Vendor Dependency Management ?
Keep Organize
้้ชใ ่มไารเา ้ถresopmocาลวเานะจ3 rd-party อ ืรหlibrary ้้ชใามน ักาท
รไงา ่ยอ

8. Why Vendor Dependency Management ?
Prevent direct edit on 3rd-party code
การแก้ไข code ของ vendor โดยตรง ส่งผลให้ เพิ่มภาระใน
การ manage และ update vendor code ต้องทาการ merge code ให้ดี
สมัยก่อนจาเป็นต้องทาแบบนี้เพราะ PHP OOP ยังไม่ดีไม่มี Namespace,
Autoload
การแก้ไข

9. Why Vendor Dependency Management ?
Security
ทันที้ที่้library มีการเปลี่ยนแปลง้สามารถ้update library ได้้ทันที้แ่่้run
`Composer update`

10. Vendor Dependency Management
• How’s it work?
Composer.json, composer.lock, vendor folder

11. Vendor Dependency Management
• Difference between `composer install` and `composer update`
`composer install` is not only new install but It means install
or update whatever listed on composer.lock.
`composer update` will check if any new version and try to
update it. It always change composer.lock to new state even
if no change on composer.json

12. Working with GIT
• Commit composer.lock is a MUST
• Same branch multi-developers
• Switching branch
• composer.lock merge conflict

13. Working with GIT
composer.lock merge conflict https://blog.martinhujer.cz/17-tips-for-
using-composer-efficiently/

14. PHP Code Autoloader
• composer install --optimize-autoloader
Index.php

15. Security Management
• `composer outdated`
Analyze composer.lock

16. Security Management
• OWASP_Dependency_Check https://www.owas
p.org/index.php/OWASP_Dependency_Check
Analyze composer.lock

17. Security Management
• SensioLabs Security Checker
https://github.com/sensiolabs/security-checker
Analyze composer.lock

18. Extra Script
• Laravel auto discovery
composer.json

19. Extra Script
• Laravel extra script
composer.json

20. Extra Script
• BrainMaestro/composer-git-hooks - automate GIT Hook to
automate `composer install`
https://github.com/BrainMaestro/composer-git-hooks

21. Development Environment
• Required PHP and php-extension

22. Development Environment
• Multi-platform PHP development

23. Development Environment
• Patch vendor package while waiting vendor release new PR

24. Q & A

25. รับสมั่ร Laravel Developer
ทั้ง Full time และ Part time
ไม่จำกัดจำนวน
ติดต่อ Pairote@netway.co.th
This Photo by Unknown author is licensed under CC BY.