enlightn
laravel-auditing
Our great sponsors
| enlightn | laravel-auditing | |
|---|---|---|
| 7 | 5 | |
| 859 | 2,878 | |
| 0.8% | 1.0% | |
| 5.8 | 7.3 | |
| 11 days ago | 5 days ago | |
| PHP | PHP | |
| GNU General Public License v3.0 or later | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
enlightn
-
Laravel code-quality tools
Enlightn scans your code to check whether it follows best practices in performance, security, and reliability. It's a paid tool, but it also has free checks you can use. At the time of writing, it has 64 checks in the free version and 128 checks in the paid version. For the purposes of this article, we'll only be using the free version.
-
Preventing Installing Composer Dependencies with Known Security Vulnerabilities
There are other tools out there, such as Enlightn and Dependabot, that help you to detect dependencies in your project with security vulnerabilities. But I'd like to think of these types of tools more as being "reactive". By that, I mean that they can alert you of vulnerable dependencies after you've installed them in your project. This can result in you introducing potential security holes into your applications without being aware at first. This is by no means a discredit to any of these types of tools though. Vulnerabilities are always being discovered in frameworks, packages, and libraries. So being able to detect them is a great way to stay on top of your project's security.
-
Laravel Security Alerts
Checkout laravel enlghtn, scans all dependencies, we have it wired for all prs and nightly on all code bases. https://www.laravel-enlightn.com/
laravel-auditing
- Quem já contribuiu e quem já usou projectos open-source?
-
Looking for a package that I can track the changes on a model
My go has been Laravel Auditing for audits, complete with who, when, where (url), what fields changed and exactly from what and to what value.
My recommendation would be https://laravel-auditing.com/. The "Transition" feature lets you rollback to specific states.
What are some alternatives?
larastan - ⚗️ Adds code analysis to Laravel improving developer productivity and code quality.
laravel-attribute-observer - Observe (and react to) attribute changes made on Eloquent models.
laravel-activitylog - Log activity inside your Laravel app
bouncer - Laravel Eloquent roles and abilities.
squire - A library of static Eloquent models for common fixture data.
laravel-responder - A Laravel Fractal package for building API responses, giving you the power of Fractal with Laravel's elegancy.
SensioLabs Security Check - A database of PHP security advisories
laravel-model - An alternative Laravel Eloquent
LaravelS - LaravelS is an out-of-the-box adapter between Laravel/Lumen and Swoole.
Laravel-Zero - A PHP framework for console artisans
SecurityAdvisories - :closed_lock_with_key: Security advisories as a simple composer exclusion list, updated daily