c2sp/wycheproof
Community-managed Wycheproof cryptography test vectors and JSON schemas. Validate crypto library implementations against known attacks and spec edge cases across many algorithms (AES-GCM, ECDSA, RSA, HKDF, ChaCha20-Poly1305, Kyber, Dilithium, more).
|
Package
|
Score
|
Description
|
Stars
|
Likes
|
Forks
|
Downloads
|
Issues
|
Score
|
Opportunity
|
License
|
Last Release
|
|
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| nyholm/nsa | 0.81 | Testing helper to access and manipulate private/protected properties and methods in PHP. Set/get instance or static properties and invoke hidden methods to simplify tests and improve DX. Install via Composer: nyholm/nsa. | 228 | 229 | 11 | 104K | 0 | 15.9 | 40.6 | MIT | 7 months ago | |
| vizir/laravel-keycloak-web-guard | 0.81 | Laravel authentication guard that signs users in to your web app through Keycloak. It handles login, logout, token refresh, and role-based route protection, delegating identity to Keycloak via OpenID Connect with minimal configuration and no custom auth code to maintain. | 168 | — | 86 | — | 21 | 5.0 | 5.7 | — | — | |
| paragonie/certainty | 0.81 | Automate and manage cacert.pem for PHP projects to ensure reliable TLS certificate validation across diverse environments. Avoid disabling verification, reduce support burden, and keep HTTP clients secure. Requires PHP 8.3+. | 263 | 265 | 18 | 68K | 4 | 30.4 | 39.7 | NOASSERTION | 2 weeks ago | |
| graham-campbell/passwd | 0.81 | A Laravel password validator and generator that checks strength, requires letters, numbers, and symbols, rejects common or weak passwords, and generates secure random passwords via a simple, configurable service provider integration. | 0 | 4 | — | 0 | — | 0.3 | — | — | — | |
| savannabits/sucipher | 0.80 | Sucipher is a Savannabits Laravel/PHP package that installs via Composer and drops into existing Laravel apps, with publishable configuration and a lightweight, developer-friendly setup. See the repository for installation steps, docs, and usage examples. | 0 | 0 | 0 | 0 | 0 | 0.3 | — | MIT | 3 years ago | |
| subhashladumor1/laravel-cybershield | 0.80 | Enterprise security intelligence for Laravel: signature-based WAF, adaptive rate limiting, bot fingerprinting, API integrity checks, threat scoring, malware scanning, and forensic logging—working together to block modern attacks. Beta; APIs may change. | 15 | 15 | 1 | 0 | 0 | 9.0 | — | MIT | 7 months ago | |
| veeqtoh/secure-code | 0.80 | — | 16 | 16 | 1 | 0 | 0 | 0.7 | — | MIT | 2 years ago | |
| kornrunner/secp256k1 | 0.80 | A PHP secp256k1 elliptic curve library for key generation, ECDSA signing and verification, and public key recovery. Useful for Ethereum-style cryptography without native extensions. | 38 | — | 20 | — | 0 | 1.6 | — | MIT | 11 months ago |
|
| ichtrojan/laravel-otp | 0.80 | A lightweight Laravel package for generating, storing, and verifying one-time passwords (OTPs). It provides configurable code length and expiry, simple validation helpers, and database-backed storage, making it easy to add OTP-based verification to Laravel applications. | 270 | — | 66 | — | 0 | 4.2 | 1.5 | — | 2 years ago | |
| mykholy/laravel-leakproof | 0.80 | mykholy/laravel-leakproof is a Laravel package that helps prevent sensitive data leaks in logs, exception reports, and responses. It provides configurable guards and redaction utilities for safer debugging, monitoring, and production error handling. | 0 | 0 | 0 | 7 | 0 | 19.2 | 14.5 | MIT | 3 weeks ago | |
| vimatech/laravel-secure-fields | 0.80 | Laravel package that adds transparent encryption for sensitive database fields. Protect PII, tokens, and secrets with automatic encrypt/decrypt through Eloquent casts, no schema changes or query rewrites, plus configurable keys, key rotation, and searchable blind indexes. | 0 | 0 | 0 | 83 | 0 | 18.7 | 30.9 | MIT | 1 month ago | |
| make-dev/laravel-security | 0.80 | Drop-in security headers for Laravel 11–13: HSTS, CSP with per-request nonces and strict-dynamic, X-Content-Type-Options, Permissions-Policy, and Subresource Integrity. Includes CSP/SRI violation report endpoints, logging/db storage, and Vapor-friendly SRI manifests. | 1 | 1 | 0 | 91 | 0 | 10.4 | 25.0 | MIT | 6 months ago | |
| labrodev/laravel-dpop | 0.80 | — | 2 | 2 | 0 | 73 | 0 | 0.0 | 19.4 | MIT | — | |
| ferdous/laravel-otp-validate | 0.80 | A Laravel package for generating and validating one-time passwords (OTP) with ease. Send codes via email or SMS, customize OTP length and expiry, apply rate limiting, use multiple drivers, and drop secure OTP verification into any Laravel app with a simple API. | 69 | 70 | 16 | 455 | 5 | 2.1 | 13.2 | — | 4 years ago | |
| perbility/bcrypt-bundle | 0.80 | A Symfony bundle that adds bcrypt password hashing to your application. It integrates with Symfony’s security component, supports configurable cost settings, and provides a straightforward way to secure user credentials with a modern, adaptable encoder. | 0 | 4 | — | 0 | — | 0.0 | — | — | — | |
| elohim/laravel-security-check | 0.80 | Laravel security checker that scans your application for common vulnerabilities, misconfigurations, and risky dependencies, then reports actionable fixes so you can harden your app before deployment. | 60 | 61 | 6 | 0 | 0 | 0.8 | — | — | 1 year ago | |
| owasp/csrf-protector-php | 0.79 | OWASP CSRF Protector for PHP helps defend web apps against cross-site request forgery using token generation, validation, and configurable per-session or per-form protection. It integrates into existing PHP projects to secure state-changing requests. | 213 | 222 | 87 | 7K | 37 | 15.1 | 34.6 | NOASSERTION | 6 years ago | |
| mykholy/laravel-accessproof | 0.79 | Laravel AccessProof is a lightweight authorization package that helps enforce and verify access rules across routes and controller actions. It integrates with Laravel gates, policies, and middleware to make permission checks consistent, harder to overlook, and easier to audit. | 0 | — | 0 | — | 0 | 19.8 | — | MIT | 3 weeks ago | |
| signaturetech/laravel-otp | 0.79 | A Laravel package for generating and verifying one-time passwords (OTPs), helping you add secure OTP-based authentication, login, and verification flows with configurable codes and expiration. | 18 | — | 2 | — | 0 | 0.5 | — | MIT | 1 year ago | |
| graham-campbell/credentials | 0.79 | A Laravel package by Graham Campbell for managing application credentials. It offers a simple, configurable way to store and retrieve sensitive values such as API keys, tokens, and passwords, helping keep them organized and out of your codebase. Integrates smoothly with Laravel's container and confi... | 0 | 58 | — | 29 | — | 0.3 | 20.4 | — | — |
How can I help you explore Laravel packages today?