lowerends/laravel-security-checker

The Symfony Security Advisories Checker for Laravel

Laravel Security Checker

, _(*1)

This package makes it easy to integrate the Symfony Security Advisories Checker into your Laravel project. It exposes an artisan command to check against the Security Advisories Database., _(*2)

Installation

Require this package with composer:, _(*3)

composer require lowerends/laravel-security-checker

Then, add the ServiceProvider to the providers array in config/app.php:, _(*4)

'providers' => [
   ...
   'Lowerends\SecurityChecker\ServiceProvider',

Usage

You can now check your Laravel project for known security issues by running the following artisan command:, _(*5)

artisan security:check

A convenient way to use this command is to add it to the post-update scripts in your project's composer.json file (extracted from the default Laravel composer.json file):, _(*6)

...
"scripts": {
    "post-install-cmd": [
            "php artisan clear-compiled",
            "php artisan optimize"
        ],
        "pre-update-cmd": [
            "php artisan clear-compiled"
        ],
        "post-update-cmd": [
            "php artisan optimize",
            "php artisan security:check"
        ],
        "post-root-package-install": [
            "php -r \"copy('.env.example', '.env');\""
        ],
        "post-create-project-cmd": [
            "php artisan key:generate"
        ]
},
...

The output will tell you if there are known security issues and if so, list them in order for you to take the necessary actions., _(*7)

License

The Laravel Security Checker is open-sourced software licensed under the MIT license., _(*8)