(In reply to Bernd Ritter from comment #2) > The sha256 of the composer.phar in OSC is different than the original > composer.phar from the upstream project: > > composer.phar from OSC: > 5f3d57c8cf61916bee35d1ffa567652e6ced4d7aca02749ff30e0e7efc38bfd3 > composer.phar > > composer.phar from upstream > (https://getcomposer.org/download/2.7.1/composer.phar.sha256sum): > 1ffd0be3f27e237b1ae47f9e8f29f96ac7f50a0bd9eef4f88cdbe94dd04bfff0 > composer.phar I've sent a submit request to the package maintainers with a fix.