PHPackages                             drupal/core-file-security - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Security](/categories/security)
4. /
5. drupal/core-file-security

ActiveLibrary[Security](/categories/security)

drupal/core-file-security
=========================

FileSecurity.

11.4.0(2y ago)163.5k↓34%11GPL-2.0-or-laterPHPPHP >=8.3.0

Since Sep 17Pushed 1w ago4 watchersCompare

[ Source](https://github.com/drupal/core-file-security)[ Packagist](https://packagist.org/packages/drupal/core-file-security)[ Docs](https://www.drupal.org/project/drupal)[ RSS](/packages/drupal-core-file-security/feed)WikiDiscussions 11.x Synced yesterday

READMEChangelogDependenciesVersions (379)Used By (1)

```
The Drupal FileSecurity Component

Thanks for using this Drupal component.

You can participate in its development on Drupal.org, through our issue system:
https://www.drupal.org/project/issues/drupal

You can get the full Drupal repo here:
https://www.drupal.org/project/drupal/git-instructions

You can browse the full Drupal repo here:
https://git.drupalcode.org/project/drupal
```

###  Health Score

56

—

FairBetter than 97% of packages

Maintenance64

Regular maintenance activity

Popularity30

Limited adoption so far

Community18

Small or concentrated contributor base

Maturity93

Battle-tested with a long release history

 Bus Factor1

Top contributor holds 71.4% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~4 days

Total

378

Last Release

810d ago

Major Versions

8.9.0 → 9.2.12020-06-29

8.9.16 → 9.4.112021-12-21

9.4.12 → 10.0.0-alpha22021-12-21

9.5.11 → 10.5.22022-08-22

10.0.0-beta1 → 11.3.102024-04-14

PHP version history (4 changes)8.8.0-alpha1PHP >=7.0.8

9.0.0-beta2PHP >=7.3.0

10.5.2PHP >=8.1.0

11.3.10PHP >=8.3.0

### Community

Maintainers

![](https://avatars.githubusercontent.com/u/27288432?v=4)[Drupal Infrastructure](/maintainers/Drupal-Infrastructure)[@Drupal-Infrastructure](https://github.com/Drupal-Infrastructure)

---

Top Contributors

[![alexpott](https://avatars.githubusercontent.com/u/769634?v=4)](https://github.com/alexpott "alexpott (5 commits)")[![larowlan](https://avatars.githubusercontent.com/u/555254?v=4)](https://github.com/larowlan "larowlan (1 commits)")[![longwave](https://avatars.githubusercontent.com/u/197817?v=4)](https://github.com/longwave "longwave (1 commits)")

---

Tags

drupal

### Embed Badge

![Health badge](/badges/drupal-core-file-security/health.svg)

```
[![Health](https://phpackages.com/badges/drupal-core-file-security/health.svg)](https://phpackages.com/packages/drupal-core-file-security)
```

###  Alternatives

[mews/purifier

Laravel 5/6/7/8/9/10 HtmlPurifier Package

2.0k18.7M143](/packages/mews-purifier)[drupal/core-vendor-hardening

Hardens the vendor directory for when it's in the docroot.

174.9M48](/packages/drupal-core-vendor-hardening)[paragonie/ecc

PHP Elliptic Curve Cryptography library

24820.0k37](/packages/paragonie-ecc)[mxr576/ddqg-composer-audit

Drupal Dependency Quality Gate Composer Audit plugin

1062.4k3](/packages/mxr576-ddqg-composer-audit)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)