PHPackages                             rhertogh/yii2-security.txt - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Security](/categories/security)
4. /
5. rhertogh/yii2-security.txt

ActiveYii2-extension[Security](/categories/security)

rhertogh/yii2-security.txt
==========================

A Yii2 extension to serve .well-known/security.txt

1.0.0-alpha2(1y ago)01.7k↓50%Apache-2.0PHPPHP &gt;=8.1.0

Since Aug 18Pushed 1y ago1 watchersCompare

[ Source](https://github.com/rhertogh/yii2-security.txt)[ Packagist](https://packagist.org/packages/rhertogh/yii2-security.txt)[ RSS](/packages/rhertogh-yii2-securitytxt/feed)WikiDiscussions master Synced 1mo ago

READMEChangelogDependencies (10)Versions (3)Used By (0)

Yii2 security.txt extension
===========================

[](#yii2-securitytxt-extension)

[![Latest Stable Version](https://camo.githubusercontent.com/bf35d6ae7f2ce056fe5457b13c0d6806483562d879812afe5acf41fdfda0088b/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f762f72686572746f67682f796969322d73656375726974792e7478742e737667)](https://packagist.org/packages/rhertogh/yii2-security.txt)[![build Status](https://github.com/rhertogh/yii2-security.txt/actions/workflows/build.yml/badge.svg)](https://github.com/rhertogh/yii2-security.txt/actions/workflows/build.yml)[![Code Coverage](https://camo.githubusercontent.com/6f020b89f38851a50c7a08f2570a0838b31c8d5e47ab2e3587cdcddee7143f7f/68747470733a2f2f7363727574696e697a65722d63692e636f6d2f672f72686572746f67682f796969322d73656375726974792e7478742f6261646765732f636f7665726167652e706e673f623d6d6173746572)](https://scrutinizer-ci.com/g/rhertogh/yii2-security.txt/?branch=master)[![Scrutinizer Code Quality](https://camo.githubusercontent.com/543bb34c3c7d9322e976c1a62c9b174aef586346a6cb134a97717f7171f3b1dd/68747470733a2f2f7363727574696e697a65722d63692e636f6d2f672f72686572746f67682f796969322d73656375726974792e7478742f6261646765732f7175616c6974792d73636f72652e706e673f623d6d6173746572)](https://scrutinizer-ci.com/g/rhertogh/yii2-security.txt/?branch=master)[![GitHub](https://camo.githubusercontent.com/aadd1162af5155dcd433579883f9d343d0f3baeede105d7e174bc24df48e1833/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c6963656e73652f72686572746f67682f796969322d73656375726974792e7478743f636f6c6f723d627269676874677265656e)](https://github.com/rhertogh/yii2-security.txt/blob/master/LICENSE.md)

A Yii2 extension to serve .well-known/security.txt
[RFC 9116: A File Format to Aid in Security Vulnerability Disclosure.](https://www.rfc-editor.org/rfc/rfc9116)
You can view generated examples [here](docs/guide/sample.md).

### 📑 Contents

[](#-contents)

- [Getting started](#-getting-started)
- [Test Drive](#%EF%B8%8F-test-drive)
- [Documentation](#-documentation)
- [FAQ](#-faq)
- [Versioning &amp; Change Log](#-versioning--change-log)
- [Reporting Security issues](#-reporting-security-issues)
- [Directory Structure](#-directory-structure)
- [Contributing](#-contributing)
- [Credits](#-credits)
- [License](#-license)

---

🐣 Getting started
-----------------

[](#-getting-started)

#### Requirements:

[](#requirements)

- The minimum required PHP version is 8.1 (compatibility tested up till and including PHP 8.3).
- The minimum required Yii version is 2.0.49.

#### Installation:

[](#installation)

The preferred way to install this extension is through [composer](https://getcomposer.org/download/).

```
composer require rhertogh/yii2-security.txt
```

Full installation and configuration details can be found in the docs under [Installing Yii2 security.txt](docs/guide/start-installation.md)

🏎️ Test Drive
-------------

[](#️-test-drive)

You can run a local preview instance using [Docker](https://docker.com/):

```
docker run --rm -p 82:80 --name Yii2SecurityTxt ghcr.io/rhertogh/yii2-securitytxt:master
```

After the container is started you can access the sample server on [localhost:82](http://localhost:82).

> Hint: The port number on the host machine is specified by the first part of the `-p` argument. This can be changed if desired (e.g. `-p 88:80`).

To access the CLI of the Docker container you can run:

```
docker container exec -it Yii2SecurityTxt bash
```

📖 Documentation
---------------

[](#-documentation)

There are two main sections in the documentation:

- [Usage Guide](docs/guide/README.md) for using the Yii2SecurityTxt in your own project.
- [Development Guide](docs/internals/README.md) for contributing to the Yii2SecurityTxt.

🔮 FAQ
-----

[](#-faq)

The FAQ can be found [here](docs/guide/faq.md).

📜 Versioning &amp; Change Log
-----------------------------

[](#-versioning--change-log)

The Yii2 security.txt project follows [Semantic Versioning 2.0](https://semver.org/spec/v2.0.0.html)
Please see the [Change Log](CHANGELOG.md) for more information on version history and the [Upgrading Instructions](UPGRADE.md) when upgrading to a newer version.

🔎 Reporting Security issues
---------------------------

[](#-reporting-security-issues)

In case you found a security issue please [contact us directly](https://forms.gle/8aEGxmN51Hvb7oLJ7)DO NOT use the issue tracker or discuss it in public as it will cause more damage than help.

Please note that as a non-commercial OpenSource project we are not able to pay bounties.

📂 Directory Structure
---------------------

[](#-directory-structure)

```
docker/     Docker container definition
docs/       Documentation (for both usage and development)
sample/     Sample app for the server
src/        Yii2SecurityTxt source
tests/      Codeception unit and functional tests

```

🚀 Contributing
--------------

[](#-contributing)

The Yii2SecurityTxt extension is [Open Source](LICENSE.md). You can help by:

- [Report an issue](docs/internals/report-an-issue.md)
- [Contribute with new features or bug fixes](docs/internals/pull-request-qa.md)

Thanks in advance for your contribution!

🎉 Credits
---------

[](#-credits)

- [Rutger Hertogh](https://github.com/rhertogh)
- [All Contributors](https://github.com/rhertogh/yii2-security.txt/graphs/contributors)

✒️ License
----------

[](#️-license)

The Yii2SecurityTxt extension is free software. It is released under the terms of the Apache License. Please see [`LICENSE.md`](LICENSE.md) for more information.

###  Health Score

25

—

LowBetter than 37% of packages

Maintenance34

Infrequent updates — may be unmaintained

Popularity18

Limited adoption so far

Community7

Small or concentrated contributor base

Maturity35

Early-stage or recently created project

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~1 days

Total

2

Last Release

632d ago

### Community

Maintainers

![](https://www.gravatar.com/avatar/769cc6e6d7fcc3c1c56ed0d1bddde57f225e59467e2d02486198ac067c696213?d=identicon)[rhertogh](/maintainers/rhertogh)

---

Top Contributors

[![rhertogh](https://avatars.githubusercontent.com/u/1292337?v=4)](https://github.com/rhertogh "rhertogh (29 commits)")

---

Tags

yii2security.txtRFC 9116

###  Code Quality

TestsCodeception

### Embed Badge

![Health badge](/badges/rhertogh-yii2-securitytxt/health.svg)

```
[![Health](https://phpackages.com/badges/rhertogh-yii2-securitytxt/health.svg)](https://phpackages.com/packages/rhertogh-yii2-securitytxt)
```

###  Alternatives

[nickcv/yii2-encrypter

Openssl Encrypter for Yii2

19640.0k1](/packages/nickcv-yii2-encrypter)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)
