Weave Code
Security Advisories Laravel Package
roave/security-advisories
Composer dev-only package that blocks installing dependencies with known security vulnerabilities by adding conflict rules. No runtime code or API—just prevents insecure versions during composer require/update to keep your PHP/Laravel supply chain safer.
|
Package
|
Score
|
Description
|
Stars
|
Likes
|
Forks
|
Downloads
|
Issues
|
Score
|
Opportunity
|
License
|
Last Release
|
|
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| icanhazstring/composer-unused | 0.78 | composer-unused detects and removes unused Composer dependencies in PHP/Laravel projects. It analyzes your codebase to find packages not referenced, reports what can be safely removed, and helps keep composer.json/lock lean and maintainable. | 1,681 | 1,683 | 57 | 272K | 10 | 35.8 | 38.3 | MIT | 4 months ago | |
| maglnet/composer-require-checker | 0.77 | CLI tool that scans your PHP sources and composer.json to ensure every used class/function comes from declared dependencies. Detects “soft” transitive deps and missing required PHP extensions, helping prevent breakage after dependency updates. | 998 | 1,005 | 78 | 484K | 32 | 44.2 | 58.5 | MIT | 2 months ago | |
| enlightn/security-checker | 0.77 | CLI security checker for PHP/Laravel projects. Scans your composer.lock against FriendsOfPHP Security Advisories to detect vulnerable dependencies. Install via Composer or PHAR, run security:check, get ANSI/JSON output, optional no-dev filtering and allowlisting. | 339 | 341 | 26 | 306K | 4 | 8.3 | 42.5 | MIT | 2 years ago | |
| composer/composer | 0.75 | Composer is the dependency manager for PHP. Declare project requirements, install/update packages, and manage autoloading with a lock file for repeatable builds. Works with Packagist and VCS repositories; runs via CLI on PHP 7.2.5+ (latest). | 29,420 | 29,480 | 4,789 | 3M | 114 | 91.0 | 60.1 | MIT | 2 weeks ago | |
| spatie/security-advisories-health-check | 0.71 | Laravel Health check that queries Packagist security advisories for your installed PHP packages and reports known vulnerabilities. Supports retries, result caching via Laravel cache, and ignoring specific packages for cleaner health reports. | 49 | 48 | 5 | 115K | 0 | 10.7 | 49.5 | MIT | 7 months ago | |
| moox/security | 0.66 | — | 5 | 5 | 0 | 0 | 0 | 17.7 | — | MIT | 3 months ago |
Weaver
How can I help you explore Laravel packages today?