Libraries tagged by supply-chain
laravel/vet
143691 Downloads
A dependency audit trust file for PHP.
dgtlss/warden
86705 Downloads
A deterministic Laravel security gate for CI and deployment pipelines
hexblot/composer-remediate
594 Downloads
Composer plugin that traces vulnerable dependencies to the packages you control and uses Composer's own solver to find the smallest verified upgrade that removes them.
cotonet/soak-time
25838 Downloads
Protects against supply chain attacks by filtering recently published packages.
nunomaduro/porto
11 Downloads
A dependency audit trust file for PHP.
nunomaduro/pet
10 Downloads
A dependency audit trust file for PHP.
innobrain/soak-time
4728 Downloads
Protects against supply chain attacks by filtering recently published packages.
encoredigitalgroup/heimdall
1488 Downloads
Heimdall — a Composer plugin that guards the bridge between Packagist and your vendor directory against supply chain attacks.
siol-data/dfc-connector
149 Downloads
DFC LinkML Semantic Object Connector for PHP
k2gl/tuf
2891 Downloads
TUF (The Update Framework) client for PHP: fetch and verify signed metadata and targets
k2gl/slsa-provenance
1402 Downloads
SLSA Provenance predicates (v1 and v0.2) for PHP
k2gl/sigstore-verify
2078 Downloads
Offline Sigstore bundle verifier for PHP (Fulcio, Rekor, identity policy)
k2gl/signed-note
479 Downloads
Parse, verify and sign signed notes — the transparency-log / Go sumdb format used by Sigstore Rekor checkpoints — in PHP
k2gl/in-toto-attestation
3225 Downloads
Build, sign and verify in-toto attestation Statements (v1 and v0.1) in PHP
k2gl/dsse
4234 Downloads
Sign and verify DSSE (Dead Simple Signing Envelope) payloads in PHP, with pluggable keys