Libraries tagged by SAST

PHP library for stemming Indonesian language (Bahasa Indonesia)

Go to Download

A deterministic Laravel security gate for CI and deployment pipelines

Go to Download

AI-powered multi-agent security auditor for Symfony applications — provider-agnostic via symfony/ai

Go to Download

Framework-agnostic static security scanner for PHP. Detects SQLi, XSS, command injection, path traversal, insecure deserialization, weak crypto, hardcoded secrets, and more.

Go to Download

Laravel-aware security rules for php-security-scanner. Detects Laravel SQL injection (DB::raw, whereRaw), mass assignment, debug/dd leaks, unsafe validators, CSRF bypass, insecure cookies, env exposure, Blade raw echo, open redirect, Http SSRF, Storage/File path traversal, file-upload validation gaps, Auth/Crypt/Artisan/Process/Config injection, view-name injection, session fixation, and Mail header injection.

Go to Download

A security-focused static analysis package for Laravel applications

Go to Download

PHP security vulnerability scanner with SAST and DAST capabilities

Go to Download

A security-first static analysis tool for PHP applications and frameworks. Identifies risky patterns and vulnerabilities based on CWE classifications.

Go to Download

PHP library that guess entity in Bahasa Indonesia.

Go to Download

PHP library that allows you to tokenize Bahasa Indonesia.

Go to Download

PHP library that detects sentence in Bahasa Indonesia.

Go to Download

SAST Demo

Go to Download

PHP library for stemming Indonesian language (Bahasa Indonesia)

Go to Download

SAS Token Plugin for Guzzle Bundle, a PHP HTTP client library and framework for building RESTful web service clients

Go to Download

A parser for extracting Drupal Security Advisory data.

Go to Download