Libraries tagged by vulnerabilities

CLI tool to audit project dependencies (Composer & npm) for known vulnerabilities and tell whether an available update actually leaves the vulnerable range.

Go to Download

PHP Cop checks composer.lock and flags outdated or suspicious packages.

Go to Download

Identifies which packages restrains you from upgrading to a newer framework version.

Go to Download

Handy installer for the maintainence toolset.

Go to Download

Security Monitor for Laravel

Go to Download

Collect information about composer package versions in SilverStripe

Go to Download

Official PHP SDK for SES-Queb API - Scaffold secure projects and audit vulnerabilities

Go to Download

Collect information about composer package versions in SilverStripe

Go to Download

This plugin hides the WordPress version number by removing the generator meta tag and replacing ver query parameter from enqueued scripts and styles with the file modification time.

Go to Download

Dependency to demonstrate composer deps vulnerability

Go to Download

Fix the JWT authentication vulnerability on certain Magento 2 versions. Deny tokens issued by old encryption key. If you cannot upgrade Magento or cannot apply the official patch, try this one.

Go to Download

Exposes the installed composer packages of a Magento 2 instance for vulnerability monitoring

Go to Download

A Laravel package to scan and detect vulnerabilities across Laravel projects

Go to Download

Fetch WordPress vulnerability information from Wordfence vulnerability data feed.

Go to Download

drupal-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in your Drupal code.

Go to Download