@BatmanAoD so far I have seen more issue-trackes come and go than VCSs...
So yes: Training developers in commit-discipline would for me not be wasted time and money.
Cause from what I have seen so far the question is not *whether* the issue tracker changes but *when*.
But OTOH: That's just me (and some companies I worked at).
YMMV
@dominik Have you thought of using build-numbers instead of (ab)using the patch number?
x.y.z+84
x.y.z+83
etc....
But my biggest concern is actually security or size-related. 'Cause how do I provide the data to packagist? I either need separate repositories for those ehich increases the maintenance burden or requires sophisticated automization. Or I provide precompiled "binaries" - which can contain anything. Even code that is not in the repo - a security nightmare...
How did you solve that?