Download the PHP package statikbe/laravel-security-txt without Composer
On this page you can find all versions of the php package statikbe/laravel-security-txt. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download statikbe/laravel-security-txt
More information about statikbe/laravel-security-txt
Files in statikbe/laravel-security-txt
Package laravel-security-txt
Short Description A Laravel package to manage security.txt files with automatic updates and configurable expiration
License MIT
Homepage https://github.com/statikbe/laravel-security-txt
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package laravel-security-txt
Laravel security.txt
A Laravel package to manage security.txt files with automatic updates and configurable expiration. Fetches a template from a remote URL, replaces placeholders with dynamic values, and serves the file at /.well-known/security.txt.
Installation
Install the package via Composer:
Publish the configuration file:
Configuration
The published configuration file (config/security-txt.php) contains the following options:
Environment Variables
| Variable | Description | Default |
|---|---|---|
SECURITY_TXT_ENABLED |
Enable/disable the route | true |
SECURITY_TXT_TEMPLATE_URL |
URL to fetch template from | null |
SECURITY_TXT_EXPIRES_DAYS |
Days until expiration | 365 |
Template Setup
Create a security.txt template file and host it somewhere accessible (e.g., GitHub raw file, internal server). Use {{PLACEHOLDER_NAME}} syntax for dynamic values.
Example Template
Host this file and set the URL in your published configuration file.
An example template is included in the package at stubs/security.txt.template.
Placeholders
Built-in Placeholders
| Placeholder | Description |
|---|---|
{{EXPIRES}} |
Auto-calculated expiration date in ISO 8601 format |
Custom Placeholders
Define custom placeholders in the config file. Values can be strings or callables:
Usage
Generating the File
Run the Artisan command to fetch the template and generate the security.txt file:
Override the expiration days:
Scheduling Updates
Add the command to your routes/console.php to keep the file updated:
Accessing the File
Once generated, the file is served at:
Validation
The package validates generated files against RFC 9116 requirements:
- Contact field is required
- Expires field is required
If validation fails, the file will not be written and an error will be logged.
Error Handling
The command handles errors gracefully:
- If the template URL is unreachable, an error is logged and the existing file (if any) is preserved
- If validation fails, errors are displayed and the file is not written
- All errors are logged via Laravel's logging system
Testing
Changelog
Please see CHANGELOG for more information on what has changed recently.
Credits
License
The MIT License (MIT). Please see License File for more information.
All versions of laravel-security-txt with dependencies
illuminate/contracts Version ^11.0||^12.0||^13.0
spatie/laravel-package-tools Version ^1.16