padosoft/laravel-rebel-ai-guard
Anomaly detection + AI security copilot for Laravel Rebel: deterministic rules detect anomaly cases; the optional AI only explains/suggests (sanitized prompts, no PII/OTP, human review). Part of padosoft/laravel-rebel-*.
时间：2026-06-03 09:43
padosoft/laravel-rebel-admin-api
Control-plane JSON API for Laravel Rebel: security metrics, audit-event explorer, OTP/step-up funnels, provider health, with permission-gated and tenant-scoped read models. Part of padosoft/laravel-rebel-*.
时间：2026-06-03 09:42
padosoft/laravel-rebel-admin
Web Admin Panel (Blade + AJAX + vanilla JS) for Laravel Rebel: a security operations dashboard over the Rebel Admin API. Part of padosoft/laravel-rebel-*.
时间：2026-06-03 09:42
padosoft/laravel-rebel-sessions
Device/session registry for Laravel Rebel: session/device tracking, logout-everywhere, refresh-token rotation with reuse detection, and device trust. Part of padosoft/laravel-rebel-*.
时间：2026-06-03 09:42
padosoft/laravel-rebel-recovery
High-assurance account recovery for Laravel Rebel: single-use HMAC-hashed recovery (backup) codes, generated once at enrolment, with anti-ATO checks. Part of padosoft/laravel-rebel-*.
时间：2026-06-03 09:41
padosoft/laravel-rebel-channels
Channel/provider abstraction (SMS/WhatsApp/voice) for Laravel Rebel: verification routing with fallback, cooldown, multi-dimensional rate limiting, and anti toll-fraud/IRSF defences. Part of padosoft/laravel-rebel-*.
时间：2026-06-03 09:36
padosoft/laravel-rebel-core
Core primitives, value objects and contracts for Laravel Rebel: the enterprise authentication control plane (AAL/AMR assurance, security context, audit, Sanctum tokens, rate-limiting). The entry point of the padosoft/laravel-rebel-* ecosystem.
时间：2026-06-03 07:02
irfanokr/laravel-secure-bridge
Signed, timestamped, replay-protected and optionally AES-256-GCM-encrypted request/response bridge between a JavaScript front-end (SPA or Blade + AJAX) and a Laravel API. Framework-agnostic JS client. Works on Laravel 5.5 through 12 and PHP 7.1+.
时间：2026-06-02 09:49
baspa/larascan
A security-focused static analysis package for Laravel applications
时间：2026-06-02 09:09
rasuvaeff/domain-monitor
Domain monitoring toolkit for HTTP, SSL, WHOIS, DNS, ports, security headers, robots.txt, and sitemaps.
时间：2026-06-01 06:08
k2gl/tuf
The Update Framework (TUF) client for PHP: a minimal, fail-closed metadata verifier and updater for securely distributed trust roots, such as Sigstore's.
时间：2026-06-01 02:06
jeffersongoncalves/secure-lock-cli
CLI tool to audit project dependencies (Composer & npm) for known vulnerabilities and tell whether an available update actually leaves the vulnerable range.
时间：2026-06-01 00:20
linkshieldai/linkshieldai
PHP SDK for the LinkShieldAI URL safety API.
时间：2026-05-31 07:02
kirchdev/laravel-device-sessions
Device-bound login sessions for Laravel: per-device remember-me tokens, a "where am I signed in" device list, and revoke/rename — privacy-respecting and Fortify-agnostic.
时间：2026-05-30 19:10
tiime/monolog-masker
A lightweight, zero-dependency Monolog processor to keep sensitive data and secrets out of your logs.
时间：2026-05-29 15:53