We're using satis to create a mirror with all the required composer packages and we're deploying from there. https://github.com/composer/satis

The main reason that we switch to that was exactly to avoid deployment issues. Security is also a bonus (in case somebody modifies existing packages).

Probably there are tools like this for all type of packages.

Got here because of that haha, can't deploy. EDIT: Why downvote fellas?

Because your comment adds nothing.

It adds something. It shows an example of an actual person affected by this. Yours here, however, I'm not sure what that adds :)

Someone was apparently confused as to why his comment was downvoted. I answered that question.

It shows an example of someone who caught the "why downvotes?" bait, and enables a comment like yours.

INB4: my comment shows an example of someone going meta.

Downvotes are most likely because – if you are already using git – you should just be able to switch over to a local repo?

Depends how his deployment pipeline is plumbed in. If he's dependent on Travis for builds (for example), he can't just switch.

Depending on services from others for your own business without having a SLA is just a disaster waiting to happen.

Along the lines of "two is one, one is none", anything that you don’t own or where you don’t have a SLA has to be considered not existing for a business.

"Move fast and break things." Including your own bones.

People are getting too spoiled by perceived reliability. Internet is not electricity yet. And especially third-party services on the Internet.

Totally agree.