leuverink/blade-hints

Easily spot missing authorization checks in Blade

2.0.0 2025-08-07 13:59 UTC

Requires

• php: ^8.1
• illuminate/contracts: ^10|^11|^12
• illuminate/support: ^10|^11|^12
• leuverink/asset-injector: ^3

Requires (Dev)

• friendsofphp/php-cs-fixer: ^3
• larastan/larastan: ^2.9
• laravel/pint: ^1
• orchestra/testbench: ^9
• pestphp/pest: ^2.35
• squizlabs/php_codesniffer: ^3
• tightenco/duster: ^3
• tightenco/tlint: ^9

MIT

• gwleuverink

README

Easily spot authorization checks in Laravel

Features

Mark usages of a variety of different Blade directives on your page, so you can easily spot missing authorization/auth/env checks. Especially helpful during review.

Supported directives:

• @can, @cannot, @canany
• @env, @production
• @auth, @guest

Installation

composer require leuverink/blade-hints

Configuration

[
    'enabled' => env('BLADE_HINTS_ENABLED', app()->isLocal()),

    'authorization_directives' => true,
    'authorization_if_color' => '#fca5a5', // red-300
    'authorization_else_color' => '#d8b4fe', // purple-300

    'authentication_directives' => true,
    'authentication_if_color' => '#fca5a5', // red-300
    'authentication_else_color' => '#d8b4fe', // purple-300

    'environment_directives' => true,
    'environment_if_color' => '#fca5a5', // red-300

    'guest_directives' => true,
    'guest_if_color' => '#fca5a5', // red-300
]

Development

composer lint # run all linters
composer fix # run all fixers

composer analyze # run static analysis
composer baseline # generate static analysis baseline

composer test # run test suite
composer build # bundle all assets

License

This package is open-source software licensed under the MIT license.