Download the PHP package hfryan/php-cop without Composer

On this page you can find all versions of the php package hfryan/php-cop. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.

FAQ

After the download, you have to make one include require_once('vendor/autoload.php');. After that you have to import the classes with use statements.

Example:
If you use only one package a project is not needed. But if you use more then one package, without a project it is not possible to import the classes with use statements.

In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
Some PHP packages are not free to download and because of that hosted in private repositories. In this case some credentials are needed to access such packages. Please use the auth.json textarea to insert credentials, if a package is coming from a private repository. You can look here for more information.

  • Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
  • To use Composer is sometimes complicated. Especially for beginners.
  • Composer needs much resources. Sometimes they are not available on a simple webspace.
  • If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
  • Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Please rate this library. Is it a good library?

Example code of hfryan/php-cop

Informations about the package php-cop

PHPCop 🚓

Dependency Patrol — PHP Security Scanner

Latest Version Total Downloads PHP Version License GitHub Release GitHub Stars

PHPCop is a powerful PHP security scanner that analyzes your composer.lock file to identify vulnerabilities, outdated packages, and maintenance issues in your dependencies. Keep your applications secure with comprehensive dependency health monitoring.

Why PHPCop? 🤔

Features

Quick Start 🚀

That's it! PHPCop will analyze your composer.lock and show you any security issues, outdated packages, or maintenance concerns.

Installation

Method 1: Global Installation (Recommended for regular use)

Alternative manual setup: If you prefer to configure PATH manually:

On macOS/Linux:

On Windows:

Method 2: Per-Project Installation (Simplest)

Method 3: PHAR Download (Recommended for CI/CD)

Download the latest PHAR release for zero-dependency deployment:

Benefits:

Usage

Basic Scan

Output Formats

Custom Options

CI/CD Integration 🚀

PHPCop is designed for seamless CI/CD integration with intelligent exit codes and automation-friendly features.

Enhanced Exit Codes (Default)

PHPCop uses granular exit codes to provide precise information for automated pipelines:

CI/CD Examples

GitHub Actions Integration

PHPCop provides a pre-built GitHub Action for seamless CI/CD integration:

Quick Setup (Recommended)

Advanced Configuration

Action Inputs

Input Default Description
format table Output format: table, json, md, html
fail-on high Minimum severity to fail: low, moderate, high, critical
stale-months 18 Months to flag packages as stale
exclude-dev false Exclude dev dependencies from scan
only-dev false Only scan dev dependencies
min-severity low Minimum vulnerability severity to report
ignore-packages '' Comma-separated packages to ignore
license-allowlist '' Comma-separated allowed licenses
license-denylist '' Comma-separated denied licenses
exit-code enhanced Exit code behavior: legacy, enhanced
comment-pr true Post scan results as PR comment
upload-artifacts true Upload reports as artifacts
working-directory . Directory to run scan in

Action Outputs

Output Description
exit-code The exit code from PHPCop scan
issues-found Number of issues found
vulnerabilities-found Number of vulnerabilities found
report-file Path to the generated report file

Using Outputs

Manual PHAR Download (Alternative)

Docker Integration

Sample Output

Laravel Integration 🔥

PHPCop automatically detects Laravel projects and provides framework-specific security insights!

Automatic Detection

PHPCop detects Laravel projects automatically by looking for:

When a Laravel project is detected, PHPCop provides:

Laravel-Specific Features

🎯 Framework Version Display

🔥 Laravel Package Highlighting Laravel ecosystem packages are highlighted with a 🔥 badge:

⚠️ Laravel Security Recommendations Automatic security checks for common Laravel issues:

📦 Laravel Package Context Get specific security guidance for Laravel packages:

Example Output

For a Laravel 11 Project:

JSON Output with Laravel Data:

Laravel Best Practices

PHPCop helps enforce Laravel security best practices:

Advanced Filtering 🎯

PHPCop provides powerful filtering options to focus your security analysis:

Dependency Type Filtering

License Filtering

Vulnerability Severity Filtering

Combined Filtering Examples

Performance & Caching ⚡

PHPCop is optimized for speed with intelligent caching and parallel processing:

Parallel API Calls

Intelligent Caching

Cache Control

Cache Location: {system-temp}/phpcop-cache/

Performance Tips

Configuration

Configuration File

Create a .phpcop.json file in your project root for persistent settings:

Command Options

Option Default Description
--format table Output format: table, json, md, html
--stale-months 18 Months to flag packages as stale
--fail-on high Minimum severity to fail: low, moderate, high, critical
--composer-bin composer Path to composer executable
--quiet, -q false Disable progress bar and animations
--config, -c .phpcop.json Path to configuration file
--ignore-packages [] Comma-separated packages to ignore
--only-dev false Only scan dev dependencies
--exclude-dev false Exclude dev dependencies from scan
--license-allowlist [] Comma-separated list of allowed licenses
--license-denylist [] Comma-separated list of denied licenses
--min-severity low Minimum vulnerability severity: low, moderate, high, critical
--no-cache false Disable response caching (force fresh API calls)
--exit-code enhanced Exit code behavior: legacy, enhanced

Note: Command-line options override configuration file settings.

Requirements

Building from Source 🔧

Building the PHAR

To build your own PHAR archive:

The generated phpcop.phar file is self-contained and can be distributed independently.

Development Commands

Contributing 🤝

We welcome contributions! Here's how you can help:

Support

License

Released under the MIT License. Free for personal and commercial use.

Built with ❤️ for the PHP community
Keep your dependencies secure, one scan at a time! 🚓

All versions of php-cop with dependencies

PHP Build Version
Package Version
Requires php Version >=8.3
symfony/console Version ^7.3
symfony/process Version ^7.3
guzzlehttp/guzzle Version ^7.8
composer/semver Version ^3.4
Composer command for our command line client (download client) This client runs in each environment. You don't need a specific PHP version etc. The first 20 API calls are free. Standard composer command

The package hfryan/php-cop contains the following files

Loading the files please wait ...