由于长期使用Composer进行包依赖管理，许多公用的类库都会放在GitHub上，在多个项目之间引用依赖，更新版本时，减少了很多成本，但还是存在一些问题：
庆幸的事，Composer 就提供私有仓库的形式：
{ "repositories": [ { "type": "vcs", "url": "http://svn.example.org/projectA/", "trunk-path": "Trunk", "branches-path": "Branches", "tags-path": "Tags" } ]}具体参考： https://getcomposer.org/doc/05-repositories.md
由于公司内使用的是 Subverison，使用如上方式导入私有仓库，实际上是通过 svn checkout的形式将指定的 tags检出，这时候 vendor目录下将会出现 .svn目录，导致主项目无法提交，甚至在切换 tags时出现无法检出的情况。
在 Composer项目 issue中有许多人反映此问题，解决方案是通过 svn export来代替 svn checkout，需要使用如下插件：
https://github.com/LinearSoft/composer-svn-export该插件等于是需要自己搭建一个 packaglist站点，其实仅需要一个 packages.json文件，但是需要有效的 https服务，否则将会出现如下错误：
➜ www.my-project.com composer updateYou are running composer with xdebug enabled. This has a major impact on runtime performance. See https://getcomposer.org/xdebugAdded SvnExport repo: NewPackageLoading composer repositories with package information [Composer\Downloader\TransportException] The "https://packagist.my-project.dev/packages.json" file could not be downloaded: SSL operation failed with code 1. OpenSSL Error messages: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed Failed to enable crypto failed to open stream: operation failed
如果没有这样的 https服务，可以选择在 gist上建一个 packages.json文件来达到效果：
{ "packages": { "tc/analyse": { "0.9.2": { "name": "tc/analyse", "version": "0.9.2", "source": { "type": "svn", "url": "https://svn.tc.dev/library/analyse", "reference": "/tags/0.9.2" } }, "0.9.3": { "name": "tc/analyse", "version": "0.9.3", "source": { "type": "svn", "url": "https://svn.tc.dev/library/analyse", "reference": "/tags/0.9.3" } }, "dev-master": { "name": "tc/analyse", "version": "dev-master", "source": { "type": "svn", "url": "https://svn.tc.dev/library/analyse", "reference": "/trunk" } } } }}主项目中 composer.json填充上该 Gist地址
{ "require" : { "php" : ">=5.4.0", "tc/analyse" : "0.9.3", "linearsoft/composer-svn-export" : "^0.1.2" }, "extra" : { "svn-export-repositories" : [ { "name" : "TC", "type" : "composer", "url" : "https://gist.githubusercontent.com/lancerhe/379eeee89fd0db8c0c4ca19c6bddas2f/raw/915a720635949c9d4013746845b952f88af358db" } ] }, "minimum-stability" : "stable"}运行 composer update
➜ www.my-project.com composer updateYou are running composer with xdebug enabled. This has a major impact on runtime performance. See https://getcomposer.org/xdebugAdded SvnExport repo: TCLoading composer repositories with package informationUpdating dependencies (including require-dev) - Updating tapcash/analyse (0.9.2 => 0.9.3) Exporting /tags/0.9.3Writing lock fileGenerating autoload files
