roave/security-advisories
Composer dev-only package that blocks installing dependencies with known security vulnerabilities by adding conflict rules. No runtime code or API—just prevents insecure versions during composer require/update to keep your PHP/Laravel supply chain safer.
:closed_lock_with_key: Security advisories as a simple composer exclusion list, updated daily
How can I help you explore Laravel packages today?