Libraries tagged by Security Core

Define laravel permissions and roles by code

Go to Download

Instant account security with effortless, email-based two-factor authentication; optional mobile app for more security; no tokens

Go to Download

OAuth 2.1 client (auth-code + PKCE, OIDC discovery, ID-token validation) and Client Credentials (M2M) support for Quiote.

Go to Download

PHP library to squeeze Arabic or English personal names to a fixed length for ID, bank or payment cards.

Go to Download

A security-first static analysis tool for PHP applications and frameworks. Identifies risky patterns and vulnerabilities based on CWE classifications.

Go to Download

Gishiki is a modern, fast and secure MVC framework perfect when creating a website or a web service.

Go to Download

:permission generation for all your declared routes with corresponding controller action

Go to Download

A package for ConcreteCMS to create and manage HTTPS certificates for your websites

Go to Download

Dependency-free Laravel static analysis scanner with auto-fix, baseline, and SARIF output. Composer + Claude Code skill.

Go to Download

Laravel library for visualCaptcha. VisualCaptcha is created by EmotionLoop

Go to Download

This Laravel package provides a simple wrapper around the Symfony HTML Sanitizer to safely clean untrusted HTML. It strips scripts, inline event handlers, and Alpine attributes while keeping the presentational subset (headings, lists, tables, code blocks, images, links) that rendered Markdown and READMEs need. The package is easy to install and configure, seamlessly integrating with your existing Laravel application.

Go to Download

A cryptographically secure password generator with guaranteed character-class coverage.

Go to Download

PHP 5.3+ Sentry fork for laravel authentication acl package

Go to Download

Laravel library for visualCaptcha using jQuery. VisualCaptcha is created by EmotionLoop

Go to Download

Configurable security checks for Laravel applications. Run safety audits on environment variables, configuration files, and hidden routes to prevent common mistakes before going live.

Go to Download