Libraries tagged by sarif
bartlett/sarif-php-sdk
119272 Downloads
PHP library to create and manipulate SARIF logs
jbelien/phpstan-sarif-formatter
324940 Downloads
SARIF formatter for PHPStan
bartlett/sarif-php-converters
64015 Downloads
Allows PHP projects to print a static code analysis report in SARIF format
blundergoat/gruff-php
41807 Downloads
Opinionated PHP code-quality analyzer with SARIF output, baselines, and a local dashboard.
gumslone/laravel-vulns
580 Downloads
Multi-source vulnerability lookups for PHP and Laravel — OSV, NVD, GitHub Advisories, MITRE, EUVD, CVE-Search, Red Hat, Shodan CVEDB, OSS Index, VulnCheck and Snyk behind one contract, with CVSS v2/v3/v4, EPSS/KEV enrichment, change detection and a self-audit command.
somework/lockrot
27 Downloads
Finds abandoned, unmaintained and branch-pinned packages in composer.lock. Composer plugin and standalone PHAR with CI exit codes.
sagrmore/indexpilot
0 Downloads
Framework-independent SQL index analysis and query optimization toolkit with first-class Laravel integration
mjgapp/larascan
586 Downloads
Dependency-free Laravel static analysis scanner with auto-fix, baseline, and SARIF output. Composer + Claude Code skill.
goktugcy/worker-safety
18 Downloads
Static analysis for PHP applications running on persistent workers. Detect cross-request state risks before they reach production.
ryoadi/composer-audit-sarif
22 Downloads
convert composer audit .json to .sarif
tuchsoft/issue-reporter
2 Downloads
A reporting library for static code analysis issues. It reads, aggregates, and formats common issue formats into various report types.
tanguychenier/vulnerability-hunter-symfony
16 Downloads
Security auditor for Symfony. Every finding ships with the HTTP request that proved it, so anyone can replay it. What does not reproduce is never reported.
nivoin/ship-ready
2 Downloads
Static security, performance, and production-readiness auditor for Laravel 11, 12, and 13 — 111 checks, MCP server, Octane, Queue, Tenancy, Livewire, Filament, Infrastructure
fahimtayebee/preflight
6 Downloads
A Laravel project audit and security checker package.
laravelsecurityaudit/laravel-ai-lint
6 Downloads
Static analysis for insecure AI wiring in Laravel apps: a scan command that finds AI provider keys leaked into tracked or client-reachable files, plus PHPStan rules that flag model output flowing into unsafe sinks and prompts built by concatenation. SARIF for CI.