fabpot/local-php-security-checker

Health v2 · maintenance only

Flags: archived

Adoption not part of the score

1182 stars · 77 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A command-line tool that checks PHP applications using Composer for dependencies with known security vulnerabilities, backed by the FriendsOfPHP Security Advisories Database. The repository is now archived and users are directed to use `composer audit` instead.

Use cases

• check composer.lock for known vulnerabilities
• audit php dependencies for security advisories
• scan php project for vulnerable packages in ci
• run scheduled security checks on production php app
• output vulnerability report as json or junit

When to choose

• you need a standalone binary without composer installed
• you want junit/json output for legacy CI pipelines
• you are maintaining an older toolchain that already uses it

When to avoid

• starting a new project - use `composer audit` instead
• you need actively updated vulnerability data going forward
• you need scanning for non-PHP ecosystems

Facets

cli-tool · maturity abandoned

security vulnerability-scanning dependency-audit cli security developer-tools cli windows cross-platform composer packagist php-security archived security-advisories php command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="fabpot/local-php-security-checker")