Download the PHP package epolabs/boundly without Composer
On this page you can find all versions of the php package epolabs/boundly. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download epolabs/boundly
More information about epolabs/boundly
Files in epolabs/boundly
Package boundly
Short Description The Metadata-Driven PHP Framework. Define your Domain. BOUNDLY handles the rest.
License MIT
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package boundly
🗺️ Roadmap & Strategy
Stay updated on our progress toward v1.0.0. We are currently in active alpha development.
🧠 What is BOUNDLY?
BOUNDLY is a high-performance PHP framework that uses Metadata-Driven Architecture and Convention-over-Configuration. It eliminates boilerplate code by using PHP 8+ Attributes as the single source of truth for your infrastructure.
You define your Domain (entities, actions, business logic). BOUNDLY handles the Infrastructure (routes, controllers, validation, persistence).
- ✅ Zero manual migrations — Your DB schema evolves with your code.
- ✅ Zero route files — Your endpoints are declared on your Actions.
- ✅ Zero boilerplate repositories — Generic CRUD is handled automatically.
- ✅ Zero validation rules — Payloads are validated against your entity attributes.
- ✅ Enterprise features in one line — Auditing, Soft Delete, Multi-Tenancy, Authorization, Rate Limiting.
- ✅ Real-Time Agnostic — Propagate Domain Events to WebSockets without coupling your logic to a visual driver.
- ✅ Production-ready — Static metadata cache, migration history, OpenAPI docs, and full CI/CD included.
🏛️ Architecture: Pure DDD
BOUNDLY enforces a clean, screaming architecture where the folder structure tells you what the system does, not what framework it uses.
🔥 Key Features
🧬 1. Magic Evolution (Auto DB Sync)
Forget php artisan migrate. Define your entity, run the daemon, and your database evolves automatically.
Run php artisan core:watch and your /api/users endpoint is live. ✨
🔐 2. Declarative Authorization
Protect any resource with a single attribute — no route middleware, no guards to register manually:
🛡️ 3. Declarative Behavioral Traits
Add enterprise features with a single attribute:
| Attribute | What it does |
|---|---|
#[Auditable] |
Injects created_by / updated_by — auto-populated from the request |
#[SoftDelete] |
Handles deleted_at and filters queries silently |
#[TenantAware] |
Multi-tenant data isolation at the repository level |
#[Authorize] |
Role-based access control — reads PHP Attributes, not config files |
#[Blameable] |
Extended audit trail tracking created_by/updated_by/deleted_by |
#[Timestampable] |
Auto-manage created_at/updated_at timestamps |
#[Sluggable] |
Auto-generate URL-friendly slugs from another field |
#[Policy] |
Map Laravel Policies for fine-grained authorization |
🔒 4. Security Attributes
Protect sensitive data with declarative security:
| Attribute | What it does |
|---|---|
#[Hidden] |
Exclude properties from API responses |
#[Encrypted] |
Encrypt at rest with AES-256-CBC |
#[Hashed] |
One-way hashing (bcrypt/Argon2) |
#[RateLimit] |
API rate limiting with per-IP/user tracking |
🛡️ 5. Built-in Security
Enterprise-grade security out of the box:
| Feature | Description | |
|---|---|---|
| Input Sanitization | Whitelist approach - only declared columns are accepted | |
| SQL Injection Prevention | Column whitelist validation in DynamicRepository | |
| Rate Limiting | Built-in #[RateLimit] attribute |
|
| Authorization | #[Authorize] attribute with role-based access control |
✅ 6. 40+ Validation Attributes
Comprehensive data validation out of the box:
- Type: Email, Url, IpAddress, Uuid, Json, IsoDate, Timezone, ColorHex, Slug, MacAddress
- Numeric: Min, Max, Between, Positive, Negative, Integer, Decimal
- String: MinLength, MaxLength, LengthBetween, Alpha, Alphanumeric, Numeric, Pattern, StartsWith, EndsWith, Contains
- Format: Phone, CreditCard, PostalCode, Coordinates
- Database: Unique, Exists, Enum
- File: Image, Mimes, FileSize
- Compound: Required, Confirmed, Password, StrongPassword, SameAs, DifferentFrom
🔗 7. Complete Relations Suite
All relationship types supported:
| Relation | Attribute |
|---|---|
| One-to-Many | #[BelongsTo] / #[HasMany] |
| One-to-One | #[HasOne] |
| Many-to-Many | #[ManyToMany] (with pivot sync) |
| Polymorphic | #[MorphTo] / #[MorphMany] / #[MorphOne] |
🔎 8. Pro Query Engine
Complex filtering, nested eager loading, and dual pagination out-of-the-box:
🌍 9. Full Internationalization (i18n)
Console output speaks your language:
📡 10. Agnostic WebSockets Bridge
Broadcast your domain events to the frontend in real-time, completely decoupled from infrastructure (Reverb, Pusher, Soketi) using the purely semantic ShouldBroadcastToExterior contract.
Read the Integration Guide
🚀 Quick Start
1. Create a new project
Or clone the repository:
2. Configure environment
Configure your database in .env:
2. Configure your database
3. Define your Entity
4. Start the daemon
🎉 Your API is live at http://localhost:8000/api/users.
5. Before deploying to production
⚙️ Configuration Reference
| Key | Default | Env Variable | Description |
|---|---|---|---|
locale |
en |
BOUNDLY_LOCALE |
Default language for CLI output |
api_prefix |
api |
BOUNDLY_API_PREFIX |
URL prefix for all auto-generated routes |
disable_cache |
true in local |
BOUNDLY_DISABLE_CACHE |
Forces scan mode; set false in production |
auth.default_guard |
sanctum |
BOUNDLY_AUTH_GUARD |
Guard used by #[Authorize] middleware |
pagination.default_per_page |
15 |
BOUNDLY_PER_PAGE |
Default page size |
pagination.max_per_page |
100 |
BOUNDLY_MAX_PER_PAGE |
Hard cap on page size |
rate_limit.enabled |
true |
BOUNDLY_RATE_LIMIT_ENABLED |
Enable/disable rate limiting |
rate_limit.max_attempts |
60 |
BOUNDLY_RATE_LIMIT_MAX_ATTEMPTS |
Max requests per window |
rate_limit.decay_minutes |
1 |
BOUNDLY_RATE_LIMIT_DECAY_MINUTES |
Time window in minutes |
paths.domain |
Domain/ |
— | Where BOUNDLY scans for #[Entity] |
paths.application |
Application/ |
— | Where BOUNDLY scans for #[Action] |
🛠️ Requirements
- PHP 8.2+
- Laravel 13+ (core dependency, hidden in
Infrastructure/LaravelEngine) - MySQL / PostgreSQL / SQLite
🤝 Contributing
BOUNDLY is an open source project and contributions are welcome!
Please read CONTRIBUTING.md for details on:
- How to report bugs
- How to propose new features
- The Pull Request process
- Code style guidelines
📋 Versioning
BOUNDLY follows Semantic Versioning (SemVer):
MAJOR→ Breaking changes in the API or architectureMINOR→ New backward-compatible featuresPATCH→ Bug fixes
See the full history in CHANGELOG.md.
📜 License
BOUNDLY is open-sourced software licensed under the MIT License.
☕ Support the Project
If BOUNDLY has been useful to you or you like what we're building, you can support us to keep creating and maintaining open source software:
A coffee = more time for open source code ❤️
