I'm having trouble making updates using composer on a new CraftCMS 3 install. This was working at one point as I was able to require a local repository for plugin development purposes.

Any composer usage ("composer info", "composer update", "composer list", etc.) yields the following:

Package cebe/markdown's source key should be specified as {"type": ..., "url": ..., "reference": ...}, {"type":"git","url":"https:\/\/github.com\/cebe\/markdown.git","reference":null} given. 

My (abbreviated) installed.json is as follows:

    "name": "cebe/markdown",
    "version": "1.1.2",
    "version_normalized": "",
    "source": {
        "type": "git",
        "url": "https://github.com/cebe/markdown.git",
        "reference": null
    "dist": {
        "type": "zip",
        "url": "https://api.github.com/repos/cebe/markdown/zipball/",
        "reference": null,
        "shasum": ""
    "require": {
        "lib-pcre": "*",
        "php": ">=5.4.0"
    "require-dev": {
        "cebe/indent": "*",
        "facebook/xhprof": "*@dev",
        "phpunit/phpunit": "4.1.*"
    "time": "2017-07-16 21:13:23",
    "bin": [
    "type": "library",
    "extra": {
        "branch-alias": {
            "dev-master": "1.1.x-dev"
    "installation-source": "dist",
    "autoload": {
        "psr-4": {
            "cebe\\markdown\\": ""
    "notification-url": "https://packagist.org/downloads/",
    "license": [
    "authors": [
            "name": "Carsten Brandt",
            "email": "[email protected]",
            "homepage": "http://cebe.cc/",
            "role": "Creator"
    "description": "A super fast, highly extensible markdown parser for PHP",
    "homepage": "https://github.com/cebe/markdown#readme",
    "keywords": [


I've been staring at this all afternoon and could use a fresh set of eyes. Anyone have any ideas?

Thanks in advance.


2 Answers 2


All of the references in the source key were missing from my old installed.json file.

I'm not entirely sure what caused the issue but I corrected by installing a new instance of Craft and copying the installed.json into the version of the file that was causing problems.

I am now able to run composer commands again.


I had the same issue, and was able to get composer working again by deleting the vendor/composer/installed.json file. The file was re-created (and each package’s source refererence field re-populated) when I ran composer update.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.