SecurityAdvisories
:closed_lock_with_key: Security advisories as a simple composer exclusion list, updated daily (by Roave)
enlightn
Your performance & security consultant, an artisan command away. (by enlightn)
Our great sponsors
| SecurityAdvisories | enlightn | |
|---|---|---|
| 6 | 7 | |
| 2,644 | 861 | |
| 0.9% | 1.0% | |
| 9.6 | 5.8 | |
| 8 days ago | 22 days ago | |
| PHP | ||
| MIT License | GNU General Public License v3.0 or later |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
SecurityAdvisories
Posts with mentions or reviews of SecurityAdvisories.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-01-11.
-
Preventing Installing Composer Dependencies with Known Security Vulnerabilities
To reduce the chance of introducing vulnerable dependencies into your projects, you can use tools such as "Roave Security Advisories" (roave/security-advisories).
- With the recent scandal over the 'node-ipc' package, is Composer also vulnerable like this? Is there any security measure in the Composer to prevent this type of attack?
- Open source is not a place for politics
-
Composer conflict, how can we use it?
In order to avoid accepting third-party code with well-known security issues you can take advantage of SecurityAdvisories by Roave, a library which uses conflict as shown in this article to block unsafe packages. Give it a look!
-
PHP libraries and tools
roave/security-advisories: Security advisories as a simple composer exclusion list, updated daily
-
Laravel QR Code Generator Infected with Malware
Every composer user should use at least https://github.com/Roave/SecurityAdvisories
enlightn
Posts with mentions or reviews of enlightn.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2024-02-08.
-
Laravel code-quality tools
Enlightn scans your code to check whether it follows best practices in performance, security, and reliability. It's a paid tool, but it also has free checks you can use. At the time of writing, it has 64 checks in the free version and 128 checks in the paid version. For the purposes of this article, we'll only be using the free version.
-
Preventing Installing Composer Dependencies with Known Security Vulnerabilities
There are other tools out there, such as Enlightn and Dependabot, that help you to detect dependencies in your project with security vulnerabilities. But I'd like to think of these types of tools more as being "reactive". By that, I mean that they can alert you of vulnerable dependencies after you've installed them in your project. This can result in you introducing potential security holes into your applications without being aware at first. This is by no means a discredit to any of these types of tools though. Vulnerabilities are always being discovered in frameworks, packages, and libraries. So being able to detect them is a great way to stay on top of your project's security.
-
Mass Assignment Vulnerabilities and Validation in Laravel
In this article, we're going to briefly look at different things to look out for when auditing your app's security, or adding new validation. We'll also look at how you can use "Enlightn" to detect potential mass assignment vulnerabilities.
-
Laravel Security Alerts
Checkout laravel enlghtn, scans all dependencies, we have it wired for all prs and nightly on all code bases. https://www.laravel-enlightn.com/
-
A Laravel package to monitor the health of your application
you can also check https://www.laravel-enlightn.com
-
Your automated performance/security consultant for Laravel apps!
Uhh did you check the link? It's another product. The security checker is an independent package. The Enlightn Github repo is here and the security checker is here. Lol you were so busy criticizing about emojis, you don't even know what I was talking about.
What are some alternatives?
When comparing SecurityAdvisories and enlightn you can also consider the following projects:
local-php-security-checker - PHP security vulnerabilities checker
larastan - ⚗️ Adds code analysis to Laravel improving developer productivity and code quality.
PHPStan - PHP Static Analysis Tool - discover bugs in your code without running it!
laravel-activitylog - Log activity inside your Laravel app
ruby-advisory-db - A database of vulnerable Ruby Gems
bouncer - Laravel Eloquent roles and abilities.
Deptrac - Keep your architecture clean.
SensioLabs Security Check - A database of PHP security advisories
Serializer - Library for (de-)serializing data of any complexity (supports JSON, and XML)
LaravelS - LaravelS is an out-of-the-box adapter between Laravel/Lumen and Swoole.
GrumPHP - A PHP code-quality tool
Laravel-Zero - A PHP framework for console artisans
SecurityAdvisories vs local-php-security-checker
enlightn vs larastan
SecurityAdvisories vs PHPStan
enlightn vs laravel-activitylog
SecurityAdvisories vs ruby-advisory-db
enlightn vs bouncer
SecurityAdvisories vs Deptrac
enlightn vs SensioLabs Security Check
SecurityAdvisories vs Serializer
enlightn vs LaravelS
SecurityAdvisories vs GrumPHP
enlightn vs Laravel-Zero