baer-software / larabeacon
Production readiness, performance, security, and reliability checks for Laravel applications.
Maintainers
Requires
- php: ^8.2
- composer-runtime-api: ^2.2
- ext-json: *
- enlightn/security-checker: ^2.0
- guzzlehttp/guzzle: ^7.8
- larastan/larastan: ^3.10
- laravel/framework: ^12.0|^13.0
- nikic/php-parser: ^5.4
- phpstan/phpstan: ^2.2.2
- phpstan/phpstan-deprecation-rules: ^2.0.1
- symfony/finder: ^7.2|^8.0
Requires (Dev)
- barryvdh/laravel-ide-helper: ^3.0
- brianium/paratest: ^7.0|^8.0
- friendsofphp/php-cs-fixer: ^3.0
- mockery/mockery: ^1.6
- orchestra/testbench: ^10.0|^11.0
- phpunit/phpunit: ^11.5|^12.5|^13.0
- predis/predis: ^2.3|^3.0
Suggests
- baer-software/larabeacon-pro: Adds commercial analyzers and premium support.
This package is auto-updated.
Last update: 2026-08-26 20:50:22 UTC
README
LaraBeacon checks Laravel applications for production-readiness problems across performance, security, and reliability. It is a maintained fork of the open-source Enlightn package.
Compatibility
| LaraBeacon | PHP | Laravel | Larastan | PHPStan |
|---|---|---|---|---|
3.x / dev-main |
8.2–8.5 | 12–13 | 3.x | 2.x |
Laravel 13 requires PHP 8.3 or newer.
Installation
composer require --dev baer-software/larabeacon:^3.0
Publish the configuration if you want to customize analyzer selection or baselines:
php artisan vendor:publish --tag=larabeacon
Usage
Run all applicable checks:
php artisan larabeacon
Useful options:
php artisan larabeacon --details php artisan larabeacon --ci php artisan larabeacon:baseline
Run an individual analyzer by passing its fully qualified class name:
php artisan larabeacon 'BaerSoftware\LaraBeacon\Analyzers\Security\CSRFAnalyzer'
Some analyzers inspect runtime-specific configuration. Run LaraBeacon in a production-like environment for a complete result. Use --ci for checks that are safe and deterministic in continuous integration.
Extensions and product boundaries
The public package stays at the repository root so Composer and Packagist can install it directly. Analyzer discovery supports additional namespaces and paths, including the separately implemented private package baer-software/larabeacon-pro.
- LaraBeacon: LGPL-licensed analyzer engine and public checks in this repository.
- LaraBeacon Pro: private Composer package containing 64 clean-room historical Pro checks plus modern Laravel checks.
- LaraBeacon Cloud: invitation-only SaaS for report history and teams in the private website deployment; repository integrations remain a later extension.
Cloud reporting is disabled by default and only runs with --report. Report payloads contain project metadata and analyzer findings; source snippets and exception stack traces are excluded unless they are enabled through separate explicit configuration flags. The public analyzer remains fully usable offline. See Product architecture for the intended boundaries.
LaraBeacon Pro is released separately as a private Composer package and requires LaraBeacon Core ^3.0.
Website
The standalone Laravel application in website/ contains the LaraBeacon marketing site, documentation, legal notices, complete Free/Pro check catalogue, and invitation-only Cloud application. It is a modular monolith with one deployment and database, while keeping Core and the private Pro package in their own repositories. The public catalogue still derives metadata from the real analyzers without including proprietary Pro source.
Nothing in this repository deploys or publishes the website automatically. See website/README.md and website/docs/LAUNCH_CHECKLIST.md before preparing a public launch.
Development
composer install
composer test
composer format:check
composer validate --strict
The CI matrix covers Laravel 12 and 13 across their supported PHP versions.
Origin and license
LaraBeacon is derived from Enlightn and retains its Git history and copyright. The public package is licensed under the GNU LGPL v3 or later. See NOTICE.md for attribution.