Audit Bundle Laravel Package

Product Decisions This Supports

• Compliance & Governance: Enables automated tracking of database changes for audit trails, critical for industries like finance, healthcare, or any regulated sector (e.g., GDPR, HIPAA, SOX).
• Debugging & Rollback: Provides a historical record of ORM-driven changes, simplifying debugging of data corruption or unintended modifications.
• Feature Roadmap: Accelerates development of audit logging features without building from scratch, reducing technical debt.
• Build vs. Buy: Avoids reinventing audit logging for Doctrine ORM, leveraging a battle-tested, open-source solution with minimal maintenance overhead.
• Use Cases:
  • Tracking user-driven changes (e.g., admin actions in a CMS).
  • Monitoring automated processes (e.g., cron jobs, batch updates).
  • Supporting "undo" functionality in applications (e.g., reverting accidental deletions).
• Configurable Scope: As of v1.3.2, entity-level inclusion/exclusion (audited_entities, unaudited_entities) is properly honored, allowing teams to tailor audit coverage to specific entities without custom code.

When to Consider This Package

• Adopt if:

  • Your application uses Symfony + Doctrine ORM and requires automated audit logs for compliance or debugging.
  • You need transactional integrity (audit logs fail/succeed with the original operation).
  • Your team lacks bandwidth to build a custom audit solution from scratch.
  • You prioritize ORM-level tracking (inserts, updates, relation changes) over raw SQL/DQL changes.
  • You need entity-level control over what gets audited (supported since v1.3.2).

• Look elsewhere if:

  • Your database operations rely heavily on raw SQL/DQL (this bundle doesn’t track those).
  • You need real-time audit logs (this logs changes only on flush).
  • Your audit requirements include non-Doctrine ORM databases (e.g., Eloquent, raw PDO).
  • You require field-level control over audit triggers (e.g., excluding specific fields) — entity-level inclusion/exclusion is now supported as of v1.3.2.
  • Your stack isn’t Symfony-based (though the underlying logic could be adapted).

How to Pitch It (Stakeholders)

For Executives: "This package automates compliance-ready audit logging for our Symfony/Doctrine database changes—inserts, updates, and relationship edits—without manual coding. It reduces risk by tracking who made what changes and when, while cutting development time by 80% compared to a custom solution. For $0 cost (MIT license), we gain a critical tool for debugging, security audits, and regulatory reporting. The transactional design ensures data consistency, and the open-source community backs it with 136+ stars. Recent releases (v1.3.2) show active maintenance, including configurable entity-level auditing to match our audit scope precisely."

For Engineers: "The DataDog Audit Bundle is a lightweight, zero-config (post-schema-setup) way to log all Doctrine ORM changes—including diffs and user attribution—via a single transaction. It’s battle-tested, integrates seamlessly with Symfony, and handles edge cases like relation changes. As of v1.3.2, the audited_entities and unaudited_entities configuration is properly honored, giving you entity-level control over what gets logged. Tradeoff: It doesn’t cover raw SQL/DQL or field-level exclusions, but that’s a small price for the compliance and debugging value. Setup is a one-time migration, and the MIT license means no vendor lock-in."