Download the PHP package buni/cms-core without Composer

Buni CMS

This package provides a CMS scaffold for Laravel. It includes an installer, themes and plugins scaffolding, basic models, migrations and stubs for dashboard features.

Install via composer (local path during development):

composer require buni/cms:dev-main

Updater

This package includes a built-in updater service (Buni\\Cms\\Services\\Updater) which can check a remote JSON endpoint (configured via buni.updates.endpoint) that must return at least:

bash php artisan buni:install --yes

• If sha256 is present the updater verifies the downloaded ZIP matches the checksum and will abort on mismatch.
• If a release is signed the metadata can include a signature (base64 of the signature) or signature_url to fetch the signature. The updater uses the configured public key at buni.updates.public_key to verify the release using SHA256+RSA (OpenSSL). The updater will abort if signature verification fails.
• The updater extracts the ZIP to a temporary location and performs an atomic swap (rename) of the package directory, keeping a timestamped backup directory for rollback.
• The updater supports dry (preview) and migrate options when invoked via the buni:update command.

Security notes

• Provide signed releases or at minimum a checksum in the update metadata to detect tampering.
• The current implementation performs a best-effort atomic swap via filesystem renames; on some filesystems (network mounts) atomicity may not be guaranteed.
• Test updates in a safe environment before applying to production. Backups are kept under the package parent directory named buni_update_backup_<ts>.

Usage

Via artisan:

Or call the service from code and provide a Guzzle client for testing: