Question

I want to know if I store an existing Bundle that’s on http://packagist.org in my company svn repo, do I also need to store the required packages/repos as well?

Example, the MonologBundle:

• https://packagist.org/packages/symfony/monolog-bundle ( Packagist )
• https://github.com/symfony/MonologBundle ( GIT Repo )
• https://github.com/symfony/MonologBundle/blob/master/composer.json ( JSON that shows required )

JSON required blurb:

"require": {
    "php": ">=5.3.2",
    "symfony/monolog-bridge": ">=2.1.0,<2.3-dev",
    "symfony/dependency-injection": ">=2.1.0,<2.3-dev",
    "symfony/config": ">=2.1.0,<2.3-dev",
    "monolog/monolog": "1.*"
},

My company will be making local changes to this Bundle that will not be for public consumption.
Since it will be added to our repo I wanted to know if we also have to add the required vendors/bundles/repos as well?

Answer 1

You don’t have to, you can simply download the dependencies from packagist if you don’t want to override those.

That said, I don’t see why you would need to modify the bundle itself. It should be enough to override this or that service if needed.