Is this package built true?

Plumb scores PHP packages on Security, Maintenance, and Ecosystem Health — mechanically, against fixed references, not opinions.

Tracking 175,978 packages on the road to full Packagist coverage

Missing a package? — we'll scan it right away.

Used by Filament’s official plugin directory

Recent scans

The latest packages scored by Plumb.

matricali/akamai-token-auth
82 Fair
This library provides necessary logic to generate Akamai edge authorization token and signed URL.
matriphe/laravel-md5-hash
57 Concerning
Laravel package to use unsecured MD5 for password hash
matricali/http-client
82 Fair
A wrapper of libcurl that implements PSR-7 HTTP message interface.
matricks/yii2-blitz
54 Concerning
Yii 2 Advanced Project Template
cesurapp/media-bundle
65 Concerning
Symfony Media Bundle
flyo/nitro-yii2
68 Concerning
Flyo Nitro Yii2 Framework Module
matriphe/larinfo
60 Concerning
Display system information (IP address, OS, versions) for Laravel.
matriphe/avatar
69 Concerning
Generates random PNG avatar like Gravatar.
drupal/recommended-project
81 Fair
Project template for Drupal projects with a relocated document root
matriphe/laraciproid
76 Fair
Indonesia city and province data migration and seeder for Laravel.
matraux/php-cs-fixer-config
73 Fair
Shared PHP-CS-Fixer configuration with reusable rule sets for PHP 8.3+.
matraux/xml-orm
73 Fair
A PHP 8.4+ library for converting XML data to typed entities and back, with support for lazy-loading collections and XML namespaces.
matriphe/bendera
60 Concerning
Laravel package to convert country code (ISO 3166-1 alpha-2) to the corresponding flag emoji
cleaniquecoders/pii-protection
74 Fair
Pure-PHP PII protection: field-level encryption at rest + masking of sensitive fields in audit/log payloads. No framework, no global state — plain classes with explicit inputs and outputs, usable anywhere.
superconductor-mcp/streamable-http
81 Fair
Streamable HTTP transport protocol for the Superconductor MCP framework.
gesagtgetan/neos-mcp
86 Good
MCP (Model Context Protocol) server for Neos Content Repository — gives LLMs structured access to content
flarum-lang/french
92 Good
French language pack to localize the Flarum forum software plus its official and third-party extensions.
hexmakina/tight-orm
92 Good
TightORM, close to sql table ORM
hexmakina/traitor
85 Fair
Traitor
hexmakina/log-laddy
92 Good
LogLaddy is a PSR-3 Logger Interface implementation, but aimed at user interface messaging
hexmakina/marker
92 Good
Marker is an HTML generator
hexmakina/state-agent
92 Good
StateAgent Smith manages PHP Session: user messages, current operator, cookies & search filters
hexmakina/tracer
85 Fair
SQL query logger
hexmakina/local-fs
92 Good
LocalFS is a PHP wrapper class for managing local filesystem
hexmakina/tempus
85 Fair
Tempus handles Gregorian calendar
hexmakina/lezer
92 Good
Another 18n class, called Lezer, shorthand L
hexmedia/administrator-bundle
85 Fair
HexmediaAdministrator panel main bundle
improvit17/livewire-charts
43 Poor
Livewire Charts
improvit17/laravel-pagebuilder
69 Concerning
A drag and drop pagebuilder to manage pages in any Laravel project.
improvit17/livewire-select
69 Concerning
Livewire dropdown select component
improvit17/laravel-log-s3-driver
65 Concerning
A Laravel log driver for S3
improvit17/laravel-stoplight-elements
55 Concerning
A simple API documentation package for Laravel using OpenAPI and Stoplight Elements
improwised/flysystem-google-storage
85 Fair
Improwised Flysystem adapter for Google Cloud Storage
flow-control/react-inotify
71 Fair
Event-driven inotify streams for non-blocking I/O in ReactPHP
aduincheckandcollect/check-and-collect
90 Good
CheckCollect
impruthvi/agent-detector-laravel
75 Fair
Laravel companion for agent-detector: CSRF bypass, agent log channel, and session headers for AI coding agents.
improvit17/phpagebuilder
54 Concerning
A drag and drop pagebuilder to manage pages in any PHP project.
improwised/laravel-log-enhancer
60 Concerning
Make debugging easier by adding more data to your laravel logs
improwised/api-helper
72 Fair
Laravel package to help consume REST and XML APIs with little effort.
ideiasinsolitas/deck-router
69 Concerning
PHP Router
ideil/laravel-generic-file
76 Fair
Easy uploaded files store management for the Laravel.
ideil/laravel-queue-rabbitmq
79 Fair
RabbitMQ driver for Laravel Queue
ideiasinsolitas/deck-http
69 Concerning
Http library
ideil/binary-to-text-php
85 Fair
Collection of binary-to-text encoding utilities for PHP. Includes Base32 support and much more.
idekite/flexcodesdk
79 Fair
:description
idei/usim-project
79 Fair
USIM Laravel Base Project.
googleads/shopping-content-samples
29 Poor
Samples for the Content API for Shopping
idekite/test
85 Fair
test
ideia/module
54 Concerning
description
ideil/generic-file
85 Fair
Easy uploaded files store management library.

For developers

Integrate Plumb scores into your toolchain via the public JSON API. No key required.