laravelsecurityaudit/laravel-ai-lint
Static analysis for insecure AI wiring in Laravel apps: a scan command that finds AI provider keys leaked into tracked or client-reachable files, plus PHPStan rules that flag model output flowing into unsafe sinks and prompts built by concatenation. SARIF for CI.
时间：2026-06-28 12:54
laramint/laravel-security-scanner
Laravel-aware security rules for php-security-scanner. Detects Laravel SQL injection (DB::raw, whereRaw), mass assignment, debug/dd leaks, unsafe validators, CSRF bypass, insecure cookies, env exposure, Blade raw echo, open redirect, Http SSRF, Storage/File path traversal, file-upload validation gap
时间：2026-05-15 01:29
laramint/php-security-scanner
Framework-agnostic static security scanner for PHP. Detects SQLi, XSS, command injection, path traversal, insecure deserialization, weak crypto, hardcoded secrets, and more.
时间：2026-05-15 01:05
giantpeach/wp-sane-defaults
WordPress mu-plugin that fixes common insecure and annoying defaults.
时间：2026-03-04 09:27
smichaelsen/no-insecure-typo3-extensions
This package declares conflicts to insecure TYPO3 extensions
时间：2026-01-04 02:55
move-elevator/typo3-toolbox
A TYPO3 toolbox so handy, it makes even missing plugins feel insecure.
时间：2025-07-07 11:02
sixmonkey/stupid-passwords
Generate insecure, but funny passwords
时间：2023-09-26 18:43
schams-net/nagios-extensionlist
Generates a list of insecure extensions for EXT:nagios based on the extension list in the current TYPO3 instance.
时间：2022-02-15 23:46
schams-net/nagios
Monitors TYPO3 instances and warns about insecure extensions, old TYPO3 versions, wrong PHP versions, etc. Requires a Nagios monitoring server.
时间：2020-03-15 05:46
php-extended/php-http-client-uir
A psr-18 compliant middleware client that handles upgrade insecure request headers.
时间：2019-03-31 22:25
littlebizzy/force-https
Redirects all HTTP requests to the HTTPS version and fixes insecure links and resources without altering the database (also works with CloudFlare).
时间：2019-03-19 11:54
andrewbreksa/mysql-escape-string-polyfill
mysql-escape-string-polyfill is a very insecure `mysql_escape_string` implementation (PHP 7.1/7.2/8.0) for a very limited use case
时间：2019-03-14 01:23
diegomagikal/laravel-password
Protect your users from entering dumb and common passwords
时间：2018-10-07 19:45
crude-forum/crude-forum
A very simple, crude and insecure web dicussion forum developed using PHP. Store data in text files in back-end.
时间：2018-01-03 03:55
jmikola/insecure-routes-bundle
Removes HTTPS scheme requirements from routes in your Symfony2 app (for dev/test environments).
时间：2012-02-14 22:23