psecio/iniscan
A php.ini scanner for best security practices observed · 2026-08-28
Health v2 · maintenance only
32/100
- Activity 0
- Release rhythm 35
- Longevity 100
Flags: no_releases
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.
- gap_med: n/a
- age_days: 4696
- days_rel: n/a
- days_push: 1190
- n_releases_24m: 0
Adoption not part of the score
1468 stars · 96 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
A command-line tool that scans a php.ini file against common security best practices and reports pass/fail results per setting. It is installable via Composer or as a Phar and returns exit codes suitable for CI pipelines.
Use cases
- audit php.ini for insecure settings
- check PHP configuration security best practices
- harden PHP session and error settings
- add php.ini security checks to CI
- find misconfigured PHP directives before deployment
When to choose
- you run PHP and want a quick automated config security audit
- you want exit-code-based checks in a build pipeline
- you need a lightweight Composer-installable scanner
When to avoid
- you need full application code vulnerability scanning (use a SAST tool)
- you are not working with PHP
- you need actively developed features or recent PHP version coverage
Facets
cli-tool · maturity maintenance
security vulnerability-scanning configuration-management cli security developer-tools cli php windows php-ini security-audit hardening composer command-line linux macos
1 source
- readme: https://github.com/psecio/iniscan · fetched 2026-08-28 · 36d55c32476a
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| psecio/iniscan | main | 32 |
For agents
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem