PHPackages                             munkireport/laps - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Admin Panels](/categories/admin)
4. /
5. munkireport/laps

ActiveLibrary[Admin Panels](/categories/admin)

munkireport/laps
================

macOSLAPS module for munkireport.

v3.3(2y ago)25.5k6MITPHP

Since Dec 5Pushed 2y ago2 watchersCompare

[ Source](https://github.com/munkireport/laps)[ Packagist](https://packagist.org/packages/munkireport/laps)[ RSS](/packages/munkireport-laps/feed)WikiDiscussions master Synced 1mo ago

READMEChangelog (10)DependenciesVersions (19)Used By (0)

macOSLAPS module
================

[](#macoslaps-module)

This module uses a modified version of Joshua Miller's macOSLAPS script:

[![macOSLAPS Management](https://raw.githubusercontent.com/munkireport/laps/master/macOSLAPS%20Management.png)](https://raw.githubusercontent.com/munkireport/laps/master/macOSLAPS%20Management.png)

Configuration
-------------

[](#configuration)

The macOSLAPS module requires an encryption key before it will work. The key can be generated by going to the macOSLAPS Management page under the Admin tab. laps\_password\_decrypt\_enabled controls all global password decrypting. If it is set to FALSE, MunkiReport will never return plaintext password. view\_laps\_password is an array of users that you want to grant permission to view the passwords. If commented out all users will be able to view the passwords.

The configuration can be changed by adding them to the server environment variables or the `.env` file.

```
	LAPS_ENCRYPTION_KEY=
	LAPS_PASSWORD_DECRYPT_ENABLED=TRUE
	VIEW_LAPS_PASSWORD=

```

Table Schema
------------

[](#table-schema)

The table provides the following information per client:

- useraccount - User account of local admin whose password MunkiReport has
- password - Encrypted password of local admin account
- dateset - Epoch of when password was last set
- dateexpires - Epoch of when password expired
- script\_enabled - Boolean of if password changing is enabled on client
- days\_till\_expiration - Number of days between changing password
- alpha\_numeric\_only - Boolean of if password should only contain alphanumeric characters
- keychain\_remove - Boolean of if local admin keychain should be deleted when password is changed
- pass\_length - Length of the new password
- remote\_management - Boolean of if remote management is enabled
- audit - JSON array of auditing records

Remarks
=======

[](#remarks)

Module requires a crypto key. It can be made by calling `vendor/defuse/php-encryption/bin/generate-defuse-key` in the root of the munkireport directory or by visiting the macOSLAPS Management page in the Admin dropdown menu. Add the resulting key to `config.php` as `$conf['laps_encryption_key'] = 'def00000505fe726...34'`. The local password is encrypted before it enters the database and is decrypted after retrieval. Don't lose the encryption key or your local passwords are lost forever!

To control password decryption, you can set `$conf['laps_password_decrypt_enabled']` to `FALSE`. This will globally disable the show password buttons in the UI and sending the decrypted password out via API. To limit password decryption to only certain users, add their username to the `$conf['view_laps_password']` array. If this array is commented out, everyone will be able to view the password or access them via the API. The `$conf['laps_password_decrypt_enabled']` config overrides the `$conf['view_laps_password']` config when disabling all password viewing.

This module will not run if Joshua Miller's script/binary is installed, as they will conflict and cause problems.

macOSLAPS script is triggered and run by MunkiReport's preflight script.

Uses similar preferences to the macOSLAPS script and will respect profiles if used. Preference domain is `org.munkireport.laps` and has the following options:

- `LocalAdminAccount` - Short username of the local admin account to cycle the password for, default is `admin`
- `PasswordLength` - Length of password to set, default is `12`
- `DaysTillExpiration` - How long until the password is reset, default is `60`
- `RemoveKeyChain` - Remove the keychain of the local admin, default is `True`
- `AlphaNumericOnly` - Use only alphanumeric characters when making the password, default is `True`
- `RemovePassChars` - Characters to not include in the password, default is `'{}[]|`
- `Enabled` - If set to `True` macOSLAPS script will change password when it expires, default is `True`
- `RemoteManagementEnabled` - If `True` script will prioritize settings pulled from MunkiReport's database over local preferences, defaults, and profiles, default is `True`

Module will delete cached password after it verifies password is stored on MunkiReport server. This script will not (yet) change the local admin user's FileVault 2 password, if that account is authorized to unlock the drive.

Client log can be found at `/Library/Logs/macOSLAPS.log`

Module supports remote management under the Admin&gt;macOSLAPS Management page. Clients will first populate preferences with built in defaults or from profile on first run, unless client is already in MunkiReport's `laps` table. Available in the macOSLAPS Admin page are options to configure supported remote management settings, force the password to be cycled, and viewing of the audit trail. All actions are audited server side. The audit trail is viewable within the macOSLAPS Management page for either one serial number or all audit logs.

###  Health Score

36

—

LowBetter than 82% of packages

Maintenance20

Infrequent updates — may be unmaintained

Popularity25

Limited adoption so far

Community16

Small or concentrated contributor base

Maturity69

Established project with proven stability

 Bus Factor1

Top contributor holds 58.3% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~112 days

Recently: every ~26 days

Total

16

Last Release

1035d ago

Major Versions

v1.8 → v2.02022-02-01

v2.0 → v3.0b12022-12-12

### Community

Maintainers

![](https://avatars.githubusercontent.com/u/5647483?v=4)[Munkireport](/maintainers/Munkireport)[@munkireport](https://github.com/munkireport)

---

Top Contributors

[![tuxudo](https://avatars.githubusercontent.com/u/13306723?v=4)](https://github.com/tuxudo "tuxudo (14 commits)")[![bochoven](https://avatars.githubusercontent.com/u/1429002?v=4)](https://github.com/bochoven "bochoven (4 commits)")[![joncrain](https://avatars.githubusercontent.com/u/5123982?v=4)](https://github.com/joncrain "joncrain (3 commits)")[![MagerValp](https://avatars.githubusercontent.com/u/404393?v=4)](https://github.com/MagerValp "MagerValp (2 commits)")[![soberhofer](https://avatars.githubusercontent.com/u/17880532?v=4)](https://github.com/soberhofer "soberhofer (1 commits)")

### Embed Badge

![Health badge](/badges/munkireport-laps/health.svg)

```
[![Health](https://phpackages.com/badges/munkireport-laps/health.svg)](https://phpackages.com/packages/munkireport-laps)
```

###  Alternatives

[jeroennoten/laravel-adminlte

Easy AdminLTE integration with Laravel

4.0k4.8M43](/packages/jeroennoten-laravel-adminlte)[dmstr/yii2-adminlte-asset

AdminLTE backend theme asset bundle for Yii 2.0 Framework

1.1k1.8M67](/packages/dmstr-yii2-adminlte-asset)[dwij/laraadmin

LaraAdmin is a Open source Laravel Admin Panel / CMS which can be used as Admin Backend, Data Management Tool or CRM boilerplate for Laravel with features like CRUD Generation, Module Manager, Media, Menus, Backups and much more

1.6k68.7k](/packages/dwij-laraadmin)[filament/spatie-laravel-media-library-plugin

Filament support for `spatie/laravel-medialibrary`.

1764.8M125](/packages/filament-spatie-laravel-media-library-plugin)[bezhansalleh/filament-exceptions

A Simple &amp; Beautiful Pluggable Exception Viewer for FilamentPHP's Admin Panel

193195.9k13](/packages/bezhansalleh-filament-exceptions)[filament/infolists

Easily add beautiful read-only infolists to any Livewire component.

1220.8M36](/packages/filament-infolists)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)
