Semgrep
favorisiert
Docker
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
§01 · Projekte
Projekte.
Aktiv gepflegte Filament-Plugins, Laravel-Pakete und Open-Source-Starter-Kits. Alle MIT, mit Releases für v3, v4 und v5, sofern zutreffend.
§02 · katalog
Njsscan
favorisiert
Docker
njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.
Laravel Security Scanner
favorisiert
PHP-Paket
Laravel-aware security rules for php-security-scanner. Detects Laravel SQL injection (DB::raw, whereRaw), mass assignment, debug/dd leaks, unsafe validators, CSRF bypass, insecure cookies, env exposure, Blade raw echo, open redirect, Http SSRF, Storage/File path traversal, file-upload validation gaps, Auth/Crypt/Artisan/Process/Config injection, view-name injection, session fixation, and Mail header injection.
PHP Security Scanner
favorisiert
PHP-Paket
Framework-agnostic static security scanner for PHP. Detects SQLi, XSS, command injection, path traversal, insecure deserialization, weak crypto, hardcoded secrets, and more.
§03 · mitwirken
Beitragen, Issues melden, PRs öffnen.
Alle Pakete haben CI, Pest-Tests und offene Issues mit dem Tag good first issue.