Download the PHP package koeker/composer-audit-guard without Composer

On this page you can find all versions of the php package koeker/composer-audit-guard. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.

FAQ

After the download, you have to make one include require_once('vendor/autoload.php');. After that you have to import the classes with use statements.

Example:
If you use only one package a project is not needed. But if you use more then one package, without a project it is not possible to import the classes with use statements.

In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
Some PHP packages are not free to download and because of that hosted in private repositories. In this case some credentials are needed to access such packages. Please use the auth.json textarea to insert credentials, if a package is coming from a private repository. You can look here for more information.

  • Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
  • To use Composer is sometimes complicated. Especially for beginners.
  • Composer needs much resources. Sometimes they are not available on a simple webspace.
  • If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
  • Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Please rate this library. Is it a good library?

Informations about the package composer-audit-guard

composer-audit-guard

Latest Stable Version Total Downloads PHP Version License: MIT

A powerful CLI tool for Composer security audits with blacklist functionality and JUnit XML reports for CI/CD integration.

✨ Features

📦 Installation

Global

Make sure your global composer bin directory is in your PATH.

Local (per project)

🚀 Usage

Initialize Config File

Create a .auditguardrc.json config file in your project:

This creates a default config file that you can customize with your blacklist and settings.

Basic Scan

Standard scan without dev dependencies:

or with composer exec:

With Dev Dependencies

With Blacklist

Option 1: Using config file (recommended for multiple packages)

Option 2: Command line (quick one-time use)

JUnit XML Report

Important: The JUnit XML also includes blacklist warnings as failures!
If a package is on the blacklist but has no security issues, this will be reported as a failure in Jenkins/CI.
This helps keep your blacklist clean.

Combined

📋 Example Output

⚙️ Configuration

Config File (.auditguardrc.json)

You can create a config file to persist your audit settings. The file is automatically loaded if it exists in your project directory.

Option 1: Using the init command (recommended)

This creates a .auditguardrc.json file with default settings that you can customize.

Option 2: Manual creation

Create a .auditguardrc.json file in your project root:

How it works:

CLI Commands & Options

Commands:

Command Description Example
composer-audit-guard Run security audit (default) composer-audit-guard --dev
composer-audit-guard init Create .auditguardrc.json config file composer-audit-guard init

Options:

Option Description Example
--dev Include dev dependencies in scan composer-audit-guard --dev
--blacklist <packages> Comma-separated list of packages to ignore composer-audit-guard --blacklist="pkg1,pkg2"
--junit Generate JUnit XML report composer-audit-guard --junit
--output <path> Path for JUnit XML output composer-audit-guard --output="./reports/audit.xml"
--help Display help composer-audit-guard --help
--version Display version composer-audit-guard --version

🔄 CI/CD Integration

Jenkins

GitLab CI

GitHub Actions

📊 Exit Codes

Code Meaning
0 No vulnerabilities found (or all ignored)
1 Vulnerabilities found
2 Execution error (e.g., no composer.json)

📄 Requirements

🔗 Related Projects

📝 License

MIT License - see LICENSE file for details.

All versions of composer-audit-guard with dependencies

PHP Build Version
Package Version
Requires php Version >=8.0
symfony/console Version ^6.0|^7.0
symfony/process Version ^6.0|^7.0
Composer command for our command line client (download client) This client runs in each environment. You don't need a specific PHP version etc. The first 20 API calls are free. Standard composer command

The package koeker/composer-audit-guard contains the following files

Loading the files please wait ...