laravel-template-structure
by cachewraith
Installer-style Laravel package that scaffolds a clean, scalable, OOAD-based, OWASP-hardened, versioned-API architecture into any Laravel 10, 11, 12 or 13 application.
laravel-auth-audit
by phoenix1331
Authorisation coverage reporting for Laravel applications. Statically scans routes, controllers, Form Requests, and Policies to report what is and is not protected.
laravel-compliance
by parallel-oss
Map Laravel code evidence to security requirements and generate compliance reports.
laravel-security-scanner
by laramint
Laravel-aware security rules for php-security-scanner. Detects Laravel SQL injection (DB::raw, whereRaw), mass assignment, debug/dd leaks, unsafe validators, CSRF bypass, insecure cookies, env exposure, Blade raw echo, open redirect, Http SSRF, Storage/File path traversal, file-upload validation gaps, Auth/Crypt/Artisan/Process/Config injection, view-name injection, session fixation, and Mail header injection.
cli
Static analysis CLI and MCP server for Laravel projects — zero dependencies, pure PHP 8.2+