j0k3r/httplug-ssrf-plugin
HTTPlug plugin to mitigate SSRF by validating URL parts against configurable allow/deny lists. Resolves hostnames to IPs, blocks private networks by default, and restricts schemes to HTTP/HTTPS. Throws InvalidURLException on invalid targets.
|
Package
|
Score
|
Description
|
Stars
|
Likes
|
Forks
|
Downloads
|
Issues
|
Score
|
Opportunity
|
License
|
Last Release
|
|
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| artisanpack-ui/security | 0.78 | Core Laravel security toolkit for ArtisanPack UI: sanitization, escaping (Laminas Escaper), KSES filtering, validation rules, security/CSP middleware, CSP builder with nonce & reporting, rate limiting, audit/scan commands, and testing helpers. | 0 | 0 | 1 | 936 | 6 | 23.3 | 49.5 | MIT | 2 weeks ago | |
| make-dev/laravel-security | 0.78 | Drop-in security headers for Laravel 11–13: HSTS, CSP with per-request nonces and strict-dynamic, X-Content-Type-Options, Permissions-Policy, and Subresource Integrity. Includes CSP/SRI violation report endpoints, logging/db storage, and Vapor-friendly SRI manifests. | 1 | 1 | 0 | 18 | 0 | 15.5 | 15.6 | MIT | 3 months ago | |
| pratik-dabhi/laravel-firewall | 0.78 | Laravel firewall middleware for blocking abusive traffic by IP rules such as allow/deny lists and access restrictions. Helps protect routes and applications from unwanted requests with simple configuration and integration into a Laravel app. | 1 | 1 | 0 | 0 | 0 | 14.7 | — | MIT | 4 months ago | |
| depthbomb/csrf-bundle | 0.78 | — | 0 | 0 | 0 | 0 | 0 | 0.7 | — | MIT | 3 years ago | |
| nette/http | 0.77 | Nette HTTP is a lightweight PHP library for handling HTTP requests and responses. It provides clean APIs for headers, cookies, sessions, URL parsing, file uploads, and response output, making it easy to build robust web applications and services. | 491 | 511 | 89 | 188K | 17 | 38.3 | 53.7 | NOASSERTION | 1 month ago | |
| 14four/laravel-force-host | 0.77 | Middleware for Laravel that forces a single canonical host for all requests. Automatically redirects to your configured domain (and optionally scheme), preventing duplicate URLs across www/non-www and improving SEO, cache consistency, and security. | 0 | 0 | — | 0 | — | 0.0 | — | — | — | |
| artisansdk/ratelimiter | 0.77 | Laravel rate limiting package providing flexible throttling for routes and actions with configurable rules, storage drivers, and easy middleware integration. Helps protect APIs from abuse, control request bursts, and manage per-user or per-IP limits with clear, adjustable settings. | 150 | 151 | 15 | 152K | 1 | 16.3 | 45.8 | MIT | 5 months ago | |
| cresjie/ip-blocker | 0.77 | Simple Laravel 5 IP blocker. Install via Composer, publish config, and list blocked IPs in config/cresjie/block-ip.php. When a request matches, it throws IpBlockerException so you can render a custom “blocked” view in your exception handler. | 3 | 3 | 0 | 0 | 0 | 0.9 | — | MIT | 9 years ago | |
| sourcetoad/rule-helper-for-laravel | 0.77 | Fluent helpers for building Laravel validation rules. Use RuleSet to chain required/unique/max and add custom rules, or Rule for static rule builders. Supports reusable defined rule sets and extras like requiredIfAll/requiredIfAny for complex conditions. | 9 | 9 | 1 | 9K | 0 | 20.5 | 45.5 | MIT | 4 months ago | |
| spatie/laravel-littlegatekeeper | 0.77 | Laravel middleware to password-protect your app with a single, universal username/password set in config. Quickly gate staging, previews, or temporary launches without building a full auth system; publish config and enable the provider to lock down pages. | 191 | 193 | 19 | 3K | 0 | 17.0 | 18.8 | MIT | 5 months ago | |
| subhashladumor1/laravel-cybershield | 0.77 | Enterprise security intelligence for Laravel: signature-based WAF, adaptive rate limiting, bot fingerprinting, API integrity checks, threat scoring, malware scanning, and forensic logging—working together to block modern attacks. Beta; APIs may change. | 14 | 14 | 1 | 0 | 0 | 15.2 | — | MIT | 4 months ago | |
| php-http/socket-client | 0.77 | PSR-7/PSR-18 HTTP client built on PHP streams. Supports TCP and UNIX domain sockets, TLS/SSL encryption, and client certificates. Lightweight, dependency-minimal option for making HTTP requests via socket connections. | 81 | 82 | 42 | 63K | 0 | 15.0 | 43.0 | MIT | 6 months ago | |
| php-http/httplug-bundle | 0.77 | — | 390 | 391 | 51 | 225K | 5 | 28.9 | 44.3 | MIT | 3 months ago | |
| adimeo-data-suite/security | 0.76 | Laravel security toolkit for Adimeo Data Suite apps, providing common security utilities and integrations such as authentication/authorization helpers, hardened defaults, and middleware-friendly protections to secure APIs and admin back offices. | 0 | 0 | 0 | 0 | 0 | 0.0 | — | — | — | |
| php-http/throttle-plugin | 0.76 | PSR-7/PSR-18 HTTP client plugin that throttles outgoing requests to control rate and concurrency. Useful for API clients that must respect provider limits, avoid burst traffic, and smooth request flow. | 2 | 2 | 2 | 496 | 1 | 0.2 | 30.6 | MIT | — | |
| salehye/laravel-security | 0.76 | — | 0 | 0 | 0 | 0 | 0 | 0.0 | — | MIT | — | |
| codeages/plugin-bundle | 0.76 | — | 7 | 7 | 9 | 23 | 1 | 0.6 | 7.9 | — | — | |
| bepsvpt/secure-headers | 0.76 | — | 550 | 552 | 48 | 157K | 2 | 4.6 | 33.8 | MIT | — | |
| bezhansalleh/filament-plugin-essentials | 0.76 | A collection of essentials for Filament plugins: shared helpers, patterns, and base components to speed up building and maintaining Filament extensions. Provides common utilities and sensible defaults so you can ship plugins faster with less boilerplate. | 27 | 27 | 15 | 341K | 0 | 22.5 | 64.9 | MIT | 1 week ago | |
| inigopascall/spamguard | 0.76 | Laravel package to help detect and block spam in forms and user submissions. Adds simple anti-spam checks and validation hooks to reduce bot signups and junk messages, with easy configuration for common use cases. | 0 | 0 | 0 | 9 | 0 | 0.3 | 13.8 | — | 2 years ago |
How can I help you explore Laravel packages today?