irfanokr/laravel-secure-bridge
Signed, timestamped, replay-protected and optionally AES-256-GCM-encrypted request/response bridge between a JavaScript front-end (SPA or Blade + AJAX) and a Laravel API. Framework-agnostic JS client. Works on Laravel 5.5 through 12 and PHP 7.1+.
时间：2026-06-02 09:49
baspa/larascan
A security-focused static analysis package for Laravel applications
时间：2026-06-02 09:09
rasuvaeff/domain-monitor
Domain monitoring toolkit for HTTP, SSL, WHOIS, DNS, ports, security headers, robots.txt, and sitemaps.
时间：2026-06-01 06:08
k2gl/tuf
The Update Framework (TUF) client for PHP: a minimal, fail-closed metadata verifier and updater for securely distributed trust roots, such as Sigstore's.
时间：2026-06-01 02:06
jeffersongoncalves/secure-lock-cli
CLI tool to audit project dependencies (Composer & npm) for known vulnerabilities and tell whether an available update actually leaves the vulnerable range.
时间：2026-06-01 00:20
linkshieldai/linkshieldai
PHP SDK for the LinkShieldAI URL safety API.
时间：2026-05-31 07:02
kirchdev/laravel-device-sessions
Device-bound login sessions for Laravel: per-device remember-me tokens, a "where am I signed in" device list, and revoke/rename — privacy-respecting and Fortify-agnostic.
时间：2026-05-30 19:10
tiime/monolog-masker
A lightweight, zero-dependency Monolog processor to keep sensitive data and secrets out of your logs.
时间：2026-05-29 15:53
larafleet/agent
Laravel monitoring agent for LaraFleet – sends heartbeats with version, security advisory, queue, and uptime data.
时间：2026-05-28 06:51
oihana/php-middleware
Composable PHP middleware helpers — security headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, X-Content-Type-Options), CORS with preflight, CSRF, request-id, maintenance mode, rate limiting. PSR-7 compatible, zero magic strings.
时间：2026-05-27 10:20
bamise/framework
Secure enterprise CRUD library for PHP 8.4+ — hexagonal architecture, DDD, PSR standards, JWT/CSRF/XSS protection, event system.
时间：2026-05-26 21:12
openwpsecurity/core
Shared HTTP, database, admin, and security infrastructure for OpenWPSecurity plugins.
时间：2026-05-26 05:29
oihana/php-auth
Composable PHP authorization toolkit — Casbin RBAC enforcer, JWT/OIDC verification (JWKS), fine-grained capabilities, validation rules and ready-to-use HTTP middlewares for API protection.
时间：2026-05-24 17:22
desicon/seal
Seal Security & SRE Engine for PHP and Laravel
时间：2026-05-23 21:36
hryagstn/laravel-scalpel
Filesystem intrusion evidence scanner for Laravel applications
时间：2026-05-23 13:09