laramint/laravel-security-scanner
Laravel-aware security rules for php-security-scanner. Detects Laravel SQL injection (DB::raw, whereRaw), mass assignment, debug/dd leaks, unsafe validators, CSRF bypass, insecure cookies, env exposure, Blade raw echo, open redirect, Http SSRF, Storage/File path traversal, file-upload validation gap
时间：2026-05-15 01:29
laramint/php-security-scanner
Framework-agnostic static security scanner for PHP. Detects SQLi, XSS, command injection, path traversal, insecure deserialization, weak crypto, hardcoded secrets, and more.
时间：2026-05-15 01:05
webshr/acfe-pro-stubs
ACF Extended Pro stubs for static analysis (PHPStan) and IDE autocompletion.
时间：2026-05-14 19:13
topotru/phpstan-conditional-final
Smart final/abstract class enforcement with attributes-based exclusions for PHPStan. Perfect for Doctrine entities.
时间：2026-05-14 11:45
topotru/psalm-conditional-final
Smart final/abstract class enforcement with attributes-based exclusions for Psalm. Perfect for Doctrine entities.
时间：2026-05-14 11:44
crealoz/easyaudit-cli
Standalone static analysis tool for Magento 2 codebases
时间：2026-05-14 06:29
ncac/php-cognitive-complexity
CLI tool for measuring PHP cognitive complexity (ISO SonarQube) — integrates with CI/CD pipelines and Husky pre-commit hooks
时间：2026-05-12 13:23
alexandr-penkin/psalm-fixer
Automatic fixer for Psalm static analysis issues via AST transformations
时间：2026-05-11 12:17
phalanx-php/phpstan
PHPStan safety rules for Phalanx concurrent and parallel PHP
时间：2026-05-11 09:03
vix/phpstan-yii-policy-rules
PHPStan rules for Yii2 policies (install as require-dev)
时间：2026-05-11 00:42
webrium/view
Lightweight PHP template engine with hybrid static caching (no eval) for the Webrium framework.
时间：2026-05-10 20:38
b7s/catraca
PHP Quality Guardian — enforces the Catraca (ratchet) principle: quality metrics can only improve, never regress
时间：2026-05-09 01:44
fahimtayebee/preflight
A Laravel project audit and security checker package.
时间：2026-05-08 20:42
samaphp/laravel-bounded
Boundary enforcement for Laravel — invokable controllers, transaction commit boundaries, log event keys, DTO discipline, facade zones, middleware foreclosure. Validators run at artisan boot; static rules ship for PHPStan and Deptrac.
时间：2026-05-06 20:38