Is it safe to delete Composer cache?
PHP packages and package information Composer downloaded, kept for later installs.
Safe
Its owner recreates it by itself when it needs it, and nothing you made is lost.
~/
~/
What it is
Composer, the dependency manager for PHP, keeps a copy of the packages and repository information it downloads here and reuses them for later installs in any project. It removes package downloads that haven't been used for six months, but the cache can still grow large. Composer downloads anything it needs again.
If it's removed
The next installs download packages again, so they take longer and need an internet connection. Projects that are already installed keep working.
How it's removed
Composer's own cleanup command (composer clear-cache), run by the app.
The free analyzer finds it and explains it. Removing it is Pro, after a review sheet that lists every move and command. It starts checked in the Cleanup checklist, except inside Documents or Desktop.
Sources
Last checked on 26 Sep 2026. Every entry is written and checked by hand; the app and the command-line tool use the same words.