Libraries tagged by bomber

ZIP and PNG bomb scanner

Go to Download

Extracts standard ZIP files with Info-ZIP's unzip and zipinfo, behind the interface of PHP's ZipArchive: an allow list of what a ZIP file may contain, exceptions instead of false, checks before and after extraction, no ext-zip. Built for coding agents.

Go to Download

Standalone Laravel zip package: create and extract ZIP archives with zip-bomb protection, path traversal guards, and optional file-allowance checks

Go to Download

Advanced feature flag management with strategies, time bombs, and groups

Go to Download

First-party PDF reader, writer and renderer for agentic docs, in pure PHP with zero runtime dependencies. Writes PDF 1.7 from the last-word JSON document model and never writes active content. Parses PDFs, extracts text in reading order, reports active content without executing it, and guards agent reads against prompt injection. Renders vector paths, TrueType text, sampled images and baseline JPEG to PNG. Hostile-input limits refuse bombs, cycles and oversized images cleanly; unsupported content is reported.

Go to Download

Guard your Laravel app against zip bombs (decompression bombs) and zip-slip attacks: inspect any archive before you extract it.

Go to Download

A simple migration tool for Fat-Free Framework

Go to Download

Safe ZIP reading and extraction for PHP: protects against zip slip, zip bombs and symlink tricks.

Go to Download

Symfony event subscriber that traps vulnerability scanners probing for common exploit paths (.env, wp-admin, PHP shells, ...) by serving a small, highly compressible zip bomb instead of a 404.

Go to Download

Go to Download

Security-first inspection and controlled extraction of untrusted ZIP and TAR archives for PHP.

Go to Download

Custom Job Consumer

Go to Download

Image size and scaled WebP copies on Tenma, decoded off the event loop by a native plugin, with limits against decompression bombs.

Go to Download

Resized image variants for responsive delivery. Returns bytes rather than writing files, corrects EXIF orientation, strips metadata, never upscales, and refuses decompression bombs. Zero dependencies.

Go to Download

PHP API wrapper for the Giant Bomb Video Game DB.

Go to Download