Download the PHP package alex-kassel/laravel-package-audit without Composer

On this page you can find all versions of the php package alex-kassel/laravel-package-audit. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.

FAQ

After the download, you have to make one include require_once('vendor/autoload.php');. After that you have to import the classes with use statements.

Example:
If you use only one package a project is not needed. But if you use more then one package, without a project it is not possible to import the classes with use statements.

In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
Some PHP packages are not free to download and because of that hosted in private repositories. In this case some credentials are needed to access such packages. Please use the auth.json textarea to insert credentials, if a package is coming from a private repository. You can look here for more information.

  • Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
  • To use Composer is sometimes complicated. Especially for beginners.
  • Composer needs much resources. Sometimes they are not available on a simple webspace.
  • If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
  • Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Please rate this library. Is it a good library?

Example code of alex-kassel/laravel-package-audit

Informations about the package laravel-package-audit

🛡️ Laravel Package Audit & Certification

Autonomous AI Agent Skill + Deterministic CLI Quality Engine for Laravel and PHP Packages

Version Laravel Support PHP Support

Why This Exists • Quickstart • Requirements • Installation • Usage • 7 Contracts • 8 Gates • Certification • Testing • License

💡 Why This Exists

Testing Laravel packages is notoriously hard:

alex-kassel/laravel-package-audit solves this by pairing two complementary forces:

  1. The Cognitive Layer (Autonomous AI Agent Skill): Guided by 7 specialized domain contracts, the AI agent performs architectural review, SemVer boundary evaluation, and human-in-the-loop decision gating.
  2. The Mechanical Layer (Deterministic PHP CLI): Executes 8 rigid quality gates in seconds, tests the package in an isolated sandbox, and issues a tamper-proof cryptographic receipt (AUDIT.json) anchored to Git's tree_hash.

⚡ Quickstart

In Agent Chat (Antigravity, Cursor, Claude Code)

Simply tell your agent:

The agent will autonomously execute the 2-Phase Lifecycle:

  1. Collect mechanical baseline results via non-mutating CLI.
  2. Evaluate the package against the 7 specialized audit contracts.
  3. Present a structured 3-Section Report (Baseline, Planned Fixes, and Architectural Decisions with explicit (Recommended) rationales).
  4. 🛑 STOP (Human Gate): Wait for your approval before modifying any code.
  5. Upon approval, apply atomic semantic fixes and issue the cryptographic AUDIT.json certificate.

In Terminal (Artisan CLI)

📋 Requirements

📦 Installation

Require the package as a development dependency in your Laravel host application:

Zero-Touch Auto-Materialization: Upon composer require, Laravel runs package:discover, and the package automatically materializes the agent skill into your .agents/skills/package-audit/ directory. AI agents (Antigravity, Cursor, Claude Code) immediately recognize it in your next session without any manual setup.

Optionally, publish configuration or CI workflow:

💻 Usage

Auditing & Certifying a Package

To audit a local package and issue an AUDIT.json certificate:

Options:

Verifying a Certified Package

To verify that a package's AUDIT.json certificate is authentic and source code has not drifted:

Verdicts:

🧩 How It Works: The Hybrid Model

📋 The 7 Audit Contracts

The AI agent conducts deep inspections based on 7 specialized domain contracts stored in references/contracts/:

# Contract Core Scope
01 01_architecture_api.md "Laravel First" Standard: Prefer native framework abstractions (Process, Http, Sleep, Cache). Pure ServiceProvider with zero third-party wrapper bloat. Public API encapsulation, @internal boundaries, and BC break protection.
02 02_code_quality.md Strict typing (declare(strict_types=1);), return/param types, PHPStan Level 8+/max, baseline audit (no sweeping bugs under baselines), Pint styling, cross-platform path safety.
03 03_database.md Schema reversibility (up/down), table prefix isolation (preventing collisions with host apps), foreign keys, N+1 query prevention, multi-DB engine safety (SQLite/MySQL/PostgreSQL).
04 04_security_isolation.md Host application isolation: guarded container bindings (bindIf, singletonIf), no runtime config pollution, Octane state safety (no request-bound singletons), injection prevention.
05 05_composer_supply_chain.md Strict manifest validation (composer validate --strict), strict segregation (require vs require-dev), no committed composer.lock for libraries, .gitattributes export-ignore.
06 06_testing_compatibility.md Test suite quality (PHPUnit 11+ / Pest 3+), Orchestral Testbench isolation, happy & error paths, custom exceptions, mock boundaries, multi-DB test execution.
07 07_consumer_release.md Fresh sandbox consumer smoke test, clean installation without parent dependency leakage, auto-discovery verification, asset publishing, README & CHANGELOG compliance, AUDIT.json single source of truth.

🚦 The 8 Automated Quality Gates

The mechanical CLI engine executes 8 automated gates:

🔐 Cryptographic Certification

Traditional badges can be edited by anyone in Markdown. laravel-package-audit produces mathematically verifiable receipts:

The resulting AUDIT.json is committed to the package. Anyone can verify it anytime:

🛠️ Skill Management CLI

Although the skill auto-installs on composer require, you can manage it explicitly:

⚙️ Configuration

Publish the config file to config/package-audit.php:

Key options:

🧪 Testing

Run the test suite via PHPUnit:

Format code style using Laravel Pint:

📄 License

The MIT License (MIT). Please see LICENSE for more information.

All versions of laravel-package-audit with dependencies

PHP Build Version
Package Version
Requires php Version ^8.2
illuminate/support Version ^11.0|^12.0|^13.0
illuminate/console Version ^11.0|^12.0|^13.0
Composer command for our command line client (download client) This client runs in each environment. You don't need a specific PHP version etc. The first 20 API calls are free. Standard composer command

The package alex-kassel/laravel-package-audit contains the following files

Loading the files please wait ...