PHPackages                             lvmorales1/privacy-scanner - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Security](/categories/security)
4. /
5. lvmorales1/privacy-scanner

ActiveLibrary[Security](/categories/security)

lvmorales1/privacy-scanner
==========================

Scan files and git repositories for secrets and personal data leaks

v0.2.0(1mo ago)024↓50%MITPHPPHP ^8.1CI failing

Since Jun 19Pushed 1mo agoCompare

[ Source](https://github.com/lvmorales1/privacy-scanner)[ Packagist](https://packagist.org/packages/lvmorales1/privacy-scanner)[ RSS](/packages/lvmorales1-privacy-scanner/feed)WikiDiscussions main Synced 2w ago

READMEChangelog (6)Dependencies (6)Versions (10)Used By (0)

Privacy Scanner
===============

[](#privacy-scanner)

Scans files and directories for secrets and personal data that shouldn't be in your codebase — API keys, database passwords, CPFs, emails, and more.

Install
-------

[](#install)

As a project dependency:

```
composer require lvmorales1/privacy-scanner
```

For standalone development:

```
composer install
```

Usage
-----

[](#usage)

When installed as a dependency:

```
./vendor/bin/privacy-scan .
./vendor/bin/privacy-scan config/services.php
./vendor/bin/privacy-scan . --format=json
```

When running standalone:

```
php bin/privacy-scan .
php bin/privacy-scan config/services.php
php bin/privacy-scan . --format=json
```

Example output
--------------

[](#example-output)

```
[CRITICAL] AWS Access Key
File:  config/services.php
Line:  12
Value: AKIA************MPLE

[HIGH] CPF (Brazilian Tax ID)
File:  storage/customers.csv
Line:  45
Value: 123.******9-09

Scanned 42 file(s) — 2 finding(s) — Risk Score: 15/100

```

Exit code is `0` when clean, `1` when findings are found.

Configuration
-------------

[](#configuration)

Create a `privacy-scan.json` file in your project root to control when the scanner exits with `1`:

```
{
    "fail_on_score": 1,
    "fail_on_severity": "LOW"
}
```

OptionDefaultDescription`fail_on_score``1`Minimum per-finding risk score to trigger exit `1``fail_on_severity``"LOW"`Minimum severity to trigger exit `1`. Accepted values: `LOW`, `MEDIUM`, `HIGH`, `CRITICAL`Both thresholds must be met for a finding to trigger exit `1`. For example, to only fail on `HIGH` or `CRITICAL` findings:

```
{
    "fail_on_severity": "HIGH"
}
```

Rules
-----

[](#rules)

Severity is derived from the risk score: **LOW** 1–3 · **MEDIUM** 4–5 · **HIGH** 6–7 · **CRITICAL** 8–10

### Secrets

[](#secrets)

RuleCategoryScoreSeveritySSH Private Key`ssh_private_key`10CRITICALAWS Access Key`aws_key`9CRITICALStripe Live Key`stripe_key`9CRITICALDatabase Connection URL`database_url`8CRITICALGitHub Token`github_token`8CRITICALOpenAI API Key`openai_key`8CRITICALJSON Web Token`jwt`7HIGH### Personal Data

[](#personal-data)

RuleCategoryScoreSeverityCPF (Brazilian Tax ID)`cpf`6HIGHCNPJ (Brazilian Company ID)`cnpj`5MEDIUMBrazilian Phone Number`phone_br`4MEDIUMEmail Address`email`3LOWAdding a new rule
-----------------

[](#adding-a-new-rule)

Create a class in `src/Rules/Secrets/` or `src/Rules/PersonalData/`, extend `AbstractRule`, and register it in the corresponding detector.

```
final class MyTokenRule extends AbstractRule
{
    public function getName(): string          { return 'My Token'; }
    public function getCategory(): string      { return 'my_token'; }
    public function getRiskScore(): int        { return 8; }
    protected function getType(): FindingType  { return FindingType::Secret; }
    protected function getPattern(): string    { return '/mytoken_[A-Za-z0-9]{32}/'; }
}
```

Tests
-----

[](#tests)

```
./vendor/bin/phpunit
```

###  Health Score

38

—

LowBetter than 83% of packages

Maintenance91

Actively maintained with recent releases

Popularity9

Limited adoption so far

Community6

Small or concentrated contributor base

Maturity38

Early-stage or recently created project

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~0 days

Total

8

Last Release

44d ago

### Community

Maintainers

![](https://avatars.githubusercontent.com/u/93869126?v=4)[Lucas Morales](/maintainers/lvmorales1)[@lvmorales1](https://github.com/lvmorales1)

---

Top Contributors

[![lvmorales1](https://avatars.githubusercontent.com/u/93869126?v=4)](https://github.com/lvmorales1 "lvmorales1 (24 commits)")

###  Code Quality

TestsPHPUnit

### Embed Badge

![Health badge](/badges/lvmorales1-privacy-scanner/health.svg)

```
[![Health](https://phpackages.com/badges/lvmorales1-privacy-scanner/health.svg)](https://phpackages.com/packages/lvmorales1-privacy-scanner)
```

###  Alternatives

[laravel/framework

The Laravel Framework.

34.8k556.2M21.0k](/packages/laravel-framework)[friendsoftypo3/content-blocks

TYPO3 CMS Content Blocks - Content Types API | Define reusable components via YAML

105574.3k63](/packages/friendsoftypo3-content-blocks)[matomo/matomo

Matomo is the leading Free/Libre open analytics platform

21.7k39.6k](/packages/matomo-matomo)[drupal/core

Drupal is an open source content management platform powering millions of websites and applications.

21667.3M1.9k](/packages/drupal-core)[drupal/core-recommended

Locked core dependencies; require this project INSTEAD OF drupal/core.

6943.5M442](/packages/drupal-core-recommended)[testo/testo

A lightweight PHP testing framework.

20319.6k132](/packages/testo-testo)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)