{"repo":"andreapollastri/checkpoint","free":true,"listed":false,"github":"https://github.com/andreapollastri/checkpoint","clone":"git clone https://github.com/andreapollastri/checkpoint.git","description":"Laravel Security Tool","language":"PHP","stars":114,"topics":["automation","composer","cybersecurity","deployment","laravel","npm","pipeline","security-audit","security-automation","security-tools"],"license":"MIT","category":"security-tools","readme_excerpt":"Checkpoint A Laravel security scanner that audits your application for common vulnerabilities — from known CVEs to hardcoded secrets — via a single Artisan command. --- What it checks # Check Severity --- ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- --------------- 1 Composer CVE Audit — runs composer audit and reports known advisories FAIL 2 NPM CVE Audit — runs npm audit and flags critical/high vulnerabilities FAIL / WARN 3 Environment Configuration — APP DEBUG , APP KEY , APP URL , SESSION SECURE COOKIE WARN 4 .gitignore Sensitive Files — ensures .env , .key , .pem are excluded; detects if .env is tracked by git FAIL 5 File Permissions — flags world-readable .env or world-writable storage/ WARN 6 Hardcoded Secrets — scans PHP/JS files for API keys, Stripe tokens, AWS keys, GitHub PATs, PEM headers FAIL 7 SQL Injection Risks — detects raw queries with variable interpolation ( DB::select(\"… $var\") , - whereRaw(…) ) FAIL 8 Mass Assignment Vulnerabilities — finds $guarded = [] or Model::unguard() WARN 9 XSS (Cross-Site Scripting) Risks — flags unescaped {!! $var !!} in Blade views and raw echo of request input WARN 10 CSRF Protection — detects forms with POST / PUT / PATCH / DELETE missing @csrf , and checks middleware is present FAIL 11 Open Redirect Risks — spots redirect($request- …) or header('Location: ' . $var) wit","default_branch":null,"files":null,"tree":[],"storefront":"/r/andreapollastri","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/andreapollastri/checkpoint/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}