Laravel-aware security rules for php-security-scanner. Detects Laravel SQL injection (DB::raw, whereRaw), mass assignment, debug/dd leaks, unsafe validators, CSRF bypass, insecure cookies, env exposure, Blade raw echo, open redirect, Http SSRF, Storage/File path traversal, file-upload validation gaps, Auth/Crypt/Artisan/Process/Config injection, view-name injection, session fixation, and Mail header injection.

Zonda is a command-line tool for building standalone Laravel packages without needing a host Laravel application. It lets you work inside a package directory as if you were inside a regular Laravel project — running migrations, artisan commands, scaffolding files — while the package itself stays clean and portable.

Fire-and-forget HTTP stress testing runner for Laravel development environments

Visualize your Laravel request lifecycle as an interactive graph