PHPackages                             enlightn/laravel-security-checker - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Security](/categories/security)
4. /
5. enlightn/laravel-security-checker

ActiveLibrary[Security](/categories/security)

enlightn/laravel-security-checker
=================================

A Laravel package to scan your dependencies for known security vulnerabilities.

v1.1(4y ago)51173.4k↓23.5%9[1 issues](https://github.com/enlightn/laravel-security-checker/issues)[1 PRs](https://github.com/enlightn/laravel-security-checker/pulls)MITPHPPHP ^7.2|^8.0

Since Apr 21Pushed 3y ago2 watchersCompare

[ Source](https://github.com/enlightn/laravel-security-checker)[ Packagist](https://packagist.org/packages/enlightn/laravel-security-checker)[ RSS](/packages/enlightn-laravel-security-checker/feed)WikiDiscussions main Synced 1mo ago

READMEChangelog (2)Dependencies (7)Versions (3)Used By (0)

Enlightn Security Checker for Laravel
=====================================

[](#enlightn-security-checker-for-laravel)

[![tests](https://github.com/enlightn/laravel-security-checker/workflows/Tests/badge.svg?branch=main)](https://github.com/enlightn/laravel-security-checker/workflows/Tests/badge.svg?branch=main)[![MIT Licensed](https://camo.githubusercontent.com/55c0218c8f8009f06ad4ddae837ddd05301481fcf0dff8e0ed9dadda8780713e/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f6c6963656e73652d4d49542d627269676874677265656e2e7376673f7374796c653d666c61742d737175617265)](LICENSE.md)[![Latest Stable Version](https://camo.githubusercontent.com/8a562df7de338aa4247856c38b67eb481506fe26b998a66ad7454cdd80d94205/68747470733a2f2f706f7365722e707567782e6f72672f656e6c696768746e2f6c61726176656c2d73656375726974792d636865636b65722f762f737461626c653f666f726d61743d666c61742d737175617265)](https://packagist.org/packages/enlightn/laravel-security-checker)

This package includes an Artisan command that checks if your application uses dependencies with known security vulnerabilities. It is a wrapper around the [Enlightn Security Checker](https://github.com/enlightn/security-checker).

Installation
------------

[](#installation)

You may use Composer to install the package on your Laravel application:

```
composer require --dev enlightn/laravel-security-checker
```

Usage
-----

[](#usage)

To check for security vulnerabilities in your dependencies, you may run the `security:check` Artisan command:

```
php artisan security:check
```

[![sec-checker](https://user-images.githubusercontent.com/16099046/115501322-a4466800-a290-11eb-9242-ba1ac41912a0.png)](https://user-images.githubusercontent.com/16099046/115501322-a4466800-a290-11eb-9242-ba1ac41912a0.png)

Options & Arguments
-----------------------

[](#options--arguments)

### Composer Lock File

[](#composer-lock-file)

You may specify a custom location for your `composer.lock` file, using the optional argument:

```
php artisan security:check /path/to/composer.lock
```

### Format

[](#format)

By default, this command displays the result in ANSI. You may use the `--format` option to display the result in JSON instead:

```
php artisan security:check --format=json
```

### Exclude Dev Dependencies

[](#exclude-dev-dependencies)

If you would like to exclude dev dependencies from the vulnerabilities scanning, you may use the `--no-dev` option (defaults to false):

```
php artisan security:check --no-dev
```

### Custom Directory for Caching Advisories Database

[](#custom-directory-for-caching-advisories-database)

By default, the `security:check` command uses the directory returned by the `sys_get_temp_dir` PHP function for storing the cached advisories database. If you wish to modify the directory, you may use the `--temp-dir` option:

```
php artisan security:check --temp-dir=/tmp
```

Contribution Guide
------------------

[](#contribution-guide)

Thank you for considering contributing to the Enlightn security checker project! The contribution guide can be found [here](https://www.laravel-enlightn.com/docs/getting-started/contribution-guide.html).

License
-------

[](#license)

The Enlightn security checker for Laravel is licensed under the [MIT license](LICENSE.md).

###  Health Score

38

—

LowBetter than 85% of packages

Maintenance20

Infrequent updates — may be unmaintained

Popularity45

Moderate usage in the ecosystem

Community11

Small or concentrated contributor base

Maturity58

Maturing project, gaining track record

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~308 days

Total

2

Last Release

1546d ago

### Community

Maintainers

![](https://www.gravatar.com/avatar/d3b4395cbe0ac91e6c75a298f834f347905a340bd030e5f2046249a341569fee?d=identicon)[paras-malhotra](/maintainers/paras-malhotra)

---

Top Contributors

[![paras-malhotra](https://avatars.githubusercontent.com/u/16099046?v=4)](https://github.com/paras-malhotra "paras-malhotra (17 commits)")

---

Tags

laravelsecurityvulnerability-scannerlaravelpackagesecurityvulnerability scannerenlightn

###  Code Quality

TestsPHPUnit

Code StylePHP CS Fixer

### Embed Badge

![Health badge](/badges/enlightn-laravel-security-checker/health.svg)

```
[![Health](https://phpackages.com/badges/enlightn-laravel-security-checker/health.svg)](https://phpackages.com/packages/enlightn-laravel-security-checker)
```

###  Alternatives

[enlightn/security-checker

A PHP dependency vulnerabilities scanner based on the Security Advisories Database.

33732.2M110](/packages/enlightn-security-checker)[akaunting/laravel-firewall

Web Application Firewall (WAF) package for Laravel

999465.8k2](/packages/akaunting-laravel-firewall)[glaivepro/hidevara

Laravel millipackage that hides variables from getting dumped in the Whoops page when your app crashes.

27303.9k](/packages/glaivepro-hidevara)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)