How can we help?

Getting started

Create your account, sign in and find your way around the settings.

• Getting startedFrom a new account to your first composer require, in five steps.
• Creating an account and signing inSign up, confirm your e-mail address, complete your profile, accept the terms and sign in.
• Your account and settingsThe menu behind your picture, the settings pages and what each group contains, and your profile.

Packages and licences

Find plugins and themes, read a package page, follow new versions and keep your license keys.

• Finding packagesSearch the catalogue, filter by plugins or themes, sort the results, and browse by vendor.
• Reading a package pageThe header buttons, the tabs (Versions, Changelog, Files, Security, Insights), versions not available yet, and the sidebar.
• Stars, lists and watchingStar packages into lists to find them again and turn a list into a composer.json, star the versions you rely on, and watch packages to hear about new versions, security notices and withdrawals.
• Licences and the license key vaultWhat the subscription covers, why you still need the vendor's license key, and how to keep your keys with expiry reminders.
• How packages are checked, and takedownsThe checks every version passes before publication, withdrawals, and rights-holder requests.
• Security advisoriesPublic vulnerability reports matched against the versions the repository serves, and how you are told.

Composer and CI

Install with Composer, create tokens, use them in CI, and connect projects, webhooks and the API.

• Installing packages with ComposerStore your token, add the repository once per project, require packages, install paths for WordPress and Bedrock, and ZIP downloads.
• Composer tokensCreate a token, limit it to packages, networks and a date, find where it was used, revoke it, and what happens to shared tokens.
• Composer in CIA limited token for your pipeline, COMPOSER_AUTH, and recipes for GitHub Actions and GitLab CI.
• Projects: is every site up to date?Share a site's composer.lock and see which plugins and themes are behind, withdrawn or taken down — by hand or from CI.
• WebhooksBe told on your own server, in Slack or in Discord when new versions are published, a security notice goes out or a package is withdrawn.
• API keysThe public JSON API, its limits, and API keys for higher limits.

Account and security

Password, two-factor authentication, passkeys, sessions, notifications and your data.

• Password, two-factor authentication and passkeysChange your password, turn on two-factor authentication, keep recovery codes, add passkeys and sign out after inactivity.
• Sessions, security log and connected accountsSee where you are signed in and sign other browsers out, review sign-ins and changes, and connect GitHub or Google.
• Forgotten password or lost authenticatorReset your password by e-mail, and get back into an account whose authenticator app and recovery codes are lost.
• Notifications: inbox, e-mail, push and the weekly digestChoose how you hear about each kind of event, turn on push notifications, use the inbox and the weekly digest of your stars.
• Changing your e-mail, language, or deleting your accountChange the e-mail address of your account, choose the language, export your data, and delete the account.

Billing and teams

Plans, invoices and cancelling, organisations with roles and seats, and referrals.

• Plans, payment and invoicesChoose a plan, pay through Stripe, switch between monthly and yearly, find your invoices and change the card, address or VAT ID.
• Cancelling, resuming and refundsCancel at the end of the paid period, change your mind before it ends, and how refunds work.
• Organisations: create one and invite your teamOne plan for an agency or team, with a seat per member: create the organisation, invite people, choose their roles.
• Organisation tokens, billing, audit log and DPAShared Composer tokens for servers and CI, the per-seat plan and invoices, who changed what, and the data processing agreement.
• Refer a friendShare your link; when someone subscribes with it, you get credit on your next invoices.

Support and community

Contact support, ask for a package, share pages, send feedback, and follow the status, what is new and the blog.

• Contacting supportWrite to our team, follow your conversations under Settings → Support, and reply.
• Package requests and votesAsk for a plugin or theme the repository does not have, vote for other requests, and follow their state.
• Service statusIs the repository working? The status page, incident updates and how to subscribe to them.
• What's new, the blog and guidesNew features and fixes in What's new, step-by-step guides and articles on the blog, and how to follow both.
• Sharing a page and sending feedbackShare a package or any public page, and tell us what works and what does not, with a marked-up screenshot.
• MeteorGPL Private and the early-access listPrivate Composer repositories for the licences you own, and how to join the early-access list.

For vendors

Claim your vendor profile and manage it.

• Claiming your vendor profileHow makers of plugins and themes claim their vendor page, prove that they represent the vendor and get the Verified badge.