composer require vendor/package — add a packagecomposer install — install dependencies from composer.lockcomposer update — update dependencies and regenerate the lock filecomposer dump-autoload — regenerate the autoloadercomposer.json — version ranges ("^2.0"). composer.lock — exact versions pinned at install time. The lock file ensures everyone on the team and CI servers use identical versions. Always commit composer.lock.