rasuvaeff/yii3-webhooks
HMAC-signed webhook infrastructure for Yii3 — outbound signing, inbound verification, replay protection, retry policy
时间：2026-06-19 15:55
componenta/http-csrf-middleware
CSRF token managers and PSR-15 middleware for Componenta
时间：2026-06-17 15:40
vercodea/auth-core
Enterprise-grade authentication system with rate limiting (IP + user), VPN/proxy detection, pipeline access locking, CSRF protection, secure session management, OTP verification, magic link recovery, password strength validation, common/reserved password blocklists, and SQL injection prevention.
时间：2026-06-15 21:51
unbotable/unbotable-laravel
Laravel integration for Unbotable — privacy-respecting bot and spam protection
时间：2026-06-14 18:41
docile/security
Authentication, authorization, CSRF, rate limiting and signed URLs for Docile
时间：2026-06-13 21:54
mnb/mnb-secure-core
mnb-secure-core v1.0 reusable no-framework PHP security core for custom applications.
时间：2026-06-12 15:20
ekumanov/flarum-ext-edge-cache
Cookieless guest page views + CSRF retry shim, enabling safe Cloudflare edge caching of guest HTML.
时间：2026-06-12 12:54
justinholtweb/craft-garrison
Comprehensive security suite for Craft CMS — scanning, active protection, audit logging, and notifications.
时间：2026-06-11 16:10
maikschneider/solr-shield
TYPO3 extension that protects the Apache Solr search endpoint from bots and crawlers via URI obfuscation and bot detection.
时间：2026-06-11 10:19
kminet/php-obfuscator
PHP source code obfuscator — transforms namespaces, classes, methods and variables into hashed equivalents while preserving full runtime behaviour
时间：2026-06-11 06:31
mandrael/contao-form-csrf-fix
Behebt das Problem "Ungültiges Anfrage-Token" (HTTP 400), auf das Erstbesucher beim Absenden eines Contao-Formulars stoßen können (contao/contao#2820). Rein serverseitig, ohne JavaScript.
时间：2026-06-11 00:28
jarir-ahmed/cache
Framework-agnostic caching toolkit for PHP: PSR-16 + PSR-6, Redis/Memcached/APCu/File/PDO/tiered stores, tags, atomic locks, stampede protection, and HTTP caching (ETag/304, full-page).
时间：2026-06-10 17:24
arpanihan/auditify
A high-performance, decoupled audit logging and real-time threat detection package for Laravel. Features action log diffs, session activity tracking, custom authorization callbacks, and queued alerts.
时间：2026-06-05 22:59
teoprayoga/teobiefy-laravel-api-response
Laravel API response helpers with server-configured payload compression and encryption.
时间：2026-06-03 11:54
irfanokr/laravel-secure-bridge
Signed, timestamped, replay-protected and optionally AES-256-GCM-encrypted request/response bridge between a JavaScript front-end (SPA or Blade + AJAX) and a Laravel API. Framework-agnostic JS client. Works on Laravel 5.5 through 12 and PHP 7.1+.
时间：2026-06-02 09:49