与「supply-chain」相关的 PHP Composer 包
本页汇总了 Packagist 中所有与 supply-chain 方向相关的 PHP Composer 包，按下载量倒序排列，便于你快速找到最主流、活跃度最高的包。
如果你正在做 supply-chain 相关项目的开发、二次开发、性能优化或 BUG 排查，欢迎联系我们的技术团队 —— 我们承接「supply-chain」相关的定制开发、私有化部署、 对接及长期维护外包，全程专人跟进。
dgtlss/warden
A deterministic Laravel security gate for CI and deployment pipelines
时间：2024-11-18 15:09
cotonet/soak-time
Protects against supply chain attacks by filtering recently published packages.
时间：2026-03-31 14:46
k2gl/dsse
Sign and verify DSSE (Dead Simple Signing Envelope) payloads in PHP, with pluggable keys.
时间：2026-05-30 07:25
innobrain/soak-time
Protects against supply chain attacks by filtering recently published packages.
时间：2026-05-21 12:23
k2gl/in-toto-attestation
Build, sign and verify in-toto attestation Statements (v1 and v0.1) in PHP.
时间：2026-05-30 07:37
k2gl/tuf
TUF (The Update Framework) client for PHP: fetch and verify signed metadata and targets.
时间：2026-06-01 02:06
k2gl/composer-attest
Composer plugin that verifies GitHub build-provenance attestations for the packages you install
时间：2026-07-04 17:35
k2gl/sigstore-bundle
Build Sigstore bundles (.sigstore.json) in PHP — the counterpart to verification, emitting DSSE and message-signature bundles.
时间：2026-07-04 06:15
k2gl/rekor-client
A PSR-18 client for the Rekor v2 transparency log — submit entries and read checkpoints in PHP.
时间：2026-07-04 06:52
k2gl/slsa-provenance
SLSA Provenance predicates (v1 and v0.2) for PHP
时间：2026-05-30 07:53
k2gl/sigstore-verify
Offline Sigstore bundle verifier for PHP (Fulcio, Rekor, identity policy).
时间：2026-05-30 13:19
k2gl/sigstore-sign
Sign artifacts and attestations with Sigstore from PHP — sign, log to Rekor, timestamp, and assemble a bundle.
时间：2026-07-04 07:35
offline-agency/aws-blockchain-laravel
AWS Blockchain integration package for Laravel supply chain applications
时间：2025-11-04 09:37
sharkyger/composer-cve-gate
Pre-install / pre-upgrade CVE gate for Composer. Blocks before post-install scripts run.
时间：2026-05-24 15:37
as2aas/php-client
PHP client library for AS2aaS - Making AS2 messaging as simple as sending an email
时间：2025-09-27 01:28
需要「supply-chain」方向的技术支持？
- 基于以上任意 Composer 包做二次开发 / 深度定制，对接你的业务系统；
- 「supply-chain」相关模块的BUG 修复、性能优化、私有化部署；
- 整套「supply-chain」相关项目从零开发 & 长期维护外包；
- 已有系统的代码审计、安全加固、架构升级。
联系方式：邮箱 yvsm@zunyunkeji.com | QQ 316430983 | 微信 yvsm316