mibu / laravel-defaulto
Installs: 27
Dependents: 0
Suggesters: 0
Security: 0
Stars: 1
Watchers: 1
Forks: 0
Open Issues: 0
pkg:composer/mibu/laravel-defaulto
Requires
- illuminate/contracts: ^10.0
Requires (Dev)
- fakerphp/faker: ^1.21
- friendsofphp/php-cs-fixer: ^3.13
- orchestra/testbench: ^8.13
- phpstan/phpstan: ^1.9
- phpstan/phpstan-strict-rules: ^1.4
- phpunit/phpunit: ^9.5
This package is auto-updated.
Last update: 2025-12-10 19:07:11 UTC
README
This is WIP, please do not use in production.
About
A package that overrides the default Laravel configuration with secure defaults, plus some opinionated boilerplate (that can be disabled).
Features
- Secure config by default
- Increased bcrypt hashing cost
- Encrypted session data
- Expire cookies on browser close
- Prevent CSR cookies
- HTTPS only cookies
- ...
- Eloquent
- Req. morph map
- Strict mode
- Immutable dates
TODO
- Is there a way to enforce install of the Roave Security Advisories package as a dev dependency?
- Tests, tests, tests.
Documentation
//
Installation
//
Please do not blindly use this package in production without thoroughly testing the implementation.
Security
Please do not report security related issues publicly.