Libraries tagged by Security Core

Free and open source ecommerce platform, created in 2024 on the M1 platform, PHP 8.5+

Go to Download

This extension provides functionality to create a customizable cookie consent for your website. It is developed for flexibility to be customized in accordance to your data security guidelines.

Go to Download

Secure HTTP transport wrapper for MCP servers with API key auth, IP/Origin allowlisting, and rate limiting

Go to Download

Create Jira issues if it doesn't exist

Go to Download

Middleware to implement Cross-Origin Resource Sharing (CORS)

Go to Download

This Laravel package stamps a configurable set of baseline security headers (X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy, Content-Security-Policy, Cross-Origin-Opener-Policy, X-Permitted-Cross-Domain-Policies and HSTS) onto your HTTP responses via a single middleware. Every header value and the full CSP directive map are driven by config, so you can tune or disable each one without touching code.

Go to Download

Claude Code extension for PHP: audits (architecture, DDD, security, performance, PSR, design patterns, Docker, CI/CD, tests, docs), 3-level code review, automated bug fix, generators (DDD, CQRS, GoF patterns, PSR, tests, documentation, Docker, CI/CD), code explanation, refactoring. 26 commands, 62 agents, 259 skills.

Go to Download

Automated code analysis for Laravel applications with 73 open-source analyzers covering security, performance, reliability, code quality, and best practices. ShieldCI Pro adds 82 more (155 total).

Go to Download

HTTP/HTML transport layer for Milpa Live: CSRF/HMAC/nonce security, the signed XHTML state-transfer codec, the wire-protocol LiveEndpoint controller, and the HTML/Alpine/Latte-subset renderers for the Milpa PHP framework.

Go to Download

A small, framework-agnostic PHP server library for Device Bound Session Credentials (DBSC)

Go to Download

Runtime-native identity vocabulary for the Milpa PHP framework: the typed Actor / AuthContext / AuthState / Credential primitives, the CredentialVerifier, AuthContextFactory and SessionStore contracts, and the WebAuthn ceremony types (RelyingParty, WebAuthnVerifier, assertion/registration value objects) — the trusted producer of the context policies need. Zero framework, zero ORM, fail-closed by construction.

Go to Download

PHPStan extension for better support of SensitiveParameter and SensitiveParameterValue attributes.

Go to Download

An easy Laravel integration for HashiCorp Vault

Go to Download

Laravel GuardDog — Scan your Laravel project for common security vulnerabilities and generate beautiful HTML reports.

Go to Download

Two-factor authentication for Laravel Nova: authenticator apps, passkeys, email codes, recovery codes, enforcement policies, step-up re-authentication and admin oversight.

Go to Download