Weave Code
Security Advisories Laravel Package
roave/security-advisories
Composer dev-only package that blocks installing dependencies with known security vulnerabilities by adding conflict rules. No runtime code or API—just prevents insecure versions during composer require/update to keep your PHP/Laravel supply chain safer.
|
Package
|
Score
|
Description
|
Stars
|
Likes
|
Forks
|
Downloads
|
Issues
|
Score
|
Opportunity
|
License
|
Last Release
|
|
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| sensiolabs/security-checker | 0.80 | — | 1,972 | 2,060 | 112 | 139K | 0 | 6.6 | 18.1 | MIT | — | |
| enlightn/security-checker | 0.79 | CLI security checker for PHP/Laravel projects. Scans your composer.lock against FriendsOfPHP Security Advisories to detect vulnerable dependencies. Install via Composer or PHAR, run security:check, get ANSI/JSON output, optional no-dev filtering and allowlisting. | 339 | 341 | 27 | 287K | 4 | 8.4 | 41.9 | MIT | 2 years ago | |
| icanhazstring/composer-unused | 0.78 | composer-unused detects and removes unused Composer dependencies in PHP/Laravel projects. It analyzes your codebase to find packages not referenced, reports what can be safely removed, and helps keep composer.json/lock lean and maintainable. | 1,687 | 1,687 | 57 | 383K | 11 | 31.1 | 39.5 | MIT | 7 months ago | |
| maglnet/composer-require-checker | 0.77 | CLI tool that scans your PHP sources and composer.json to ensure every used class/function comes from declared dependencies. Detects “soft” transitive deps and missing required PHP extensions, helping prevent breakage after dependency updates. | 1,010 | 1,017 | 80 | 683K | 32 | 39.4 | 58.9 | MIT | 6 months ago | |
| composer/composer | 0.75 | Composer is the dependency manager for PHP. Declare project requirements, install/update packages, and manage autoloading with a lock file for repeatable builds. Works with Packagist and VCS repositories; runs via CLI on PHP 7.2.5+ (latest). | 29,504 | 29,567 | 4,829 | 4M | 127 | 89.5 | 60.6 | MIT | 3 weeks ago | |
| spatie/security-advisories-health-check | 0.68 | Laravel Health check that queries Packagist security advisories for your installed PHP packages and reports known vulnerabilities. Supports retries, result caching via Laravel cache, and ignoring specific packages for cleaner health reports. | 53 | 52 | 7 | 136K | 0 | 22.8 | 54.9 | MIT | 1 month ago | |
| moox/security | 0.66 | — | 5 | 5 | 0 | 1 | 0 | 13.0 | 1.0 | MIT | 7 months ago | |
| phpdocumentor/phpdocumentor | 0.65 | phpDocumentor is a documentation generator for PHP projects. It scans source code and DocBlocks to build API docs, can parse Markdown/ReST, embed API snippets into guides, and generate UML diagrams to help keep code and documentation in sync. | 4,345 | 4,419 | 648 | 11K | 146 | 80.4 | 37.5 | MIT | 4 months ago | |
| deptrac/deptrac | 0.65 | Deptrac helps you define and enforce architectural boundaries in PHP projects. Configure layers and dependency rules, then analyze your codebase to detect forbidden dependencies. Useful for keeping clean architecture, preventing drift, and improving maintainability in large apps. | 2,998 | 2,991 | 154 | 910K | 27 | 56.9 | 53.7 | MIT | 1 month ago | |
| rmccue/requests | 0.65 | Requests is a human-friendly PHP HTTP client for sending GET/POST/PUT/DELETE/PATCH/HEAD requests with headers, auth, files, and parameters. Supports cURL or fsockopen, SSL verification, decompression, and IDN URLs with a consistent API. | 3,574 | 3,650 | 502 | 915K | 96 | 78.8 | 66.0 | NOASSERTION | 1 month ago |
Weaver
How can I help you explore Laravel packages today?