pieceofcake2 / security-sca

v1.0.2 2026-10-18 10:09 UTC

Requires

• php: >=8.0
• pieceofcake2/report: ^1.0

Requires (Dev)

• cakephp/cakephp-codesniffer: ^5.0
• phpstan/phpstan: ^2.1
• phpunit/phpunit: ^9.6

MIT

• security
• composer
• pdf
• Audit
• report
• vulnerability
• cve
• sca

Published on Packagist.org on 2026-10-18 10:10 UTC

README

Software composition analysis of an application: the known vulnerabilities of its Composer packages (composer audit), as an A4 PDF report by CVE and risk in the design of pieceofcake2/report, and an exit code that fails CI.

composer require --dev pieceofcake2/security-sca
vendor/bin/security-sca --pdf=tmp/security-sca.pdf --fail-on=high

Documentation

• Website: https://pieceofcake2.github.io/security-sca/ (日本語: https://pieceofcake2.github.io/security-sca/ja/)
• Markdown: docs/README.md (日本語: docs/ja/README.md) (for AI tools and offline reading)

Requirements

• PHP 8.0+ and Composer 2.8+
• Google Chrome or Chromium 131+

Installation

composer require --dev pieceofcake2/security-sca

Reporting Issues

Please open an issue on GitHub. To report a security vulnerability, use private vulnerability reporting.

Contributing

See the contribution guidelines.

Origin

This package was created by pieceofcake2, which also maintains it. It is not a fork of another project and is not based on one.

License

The MIT License. See LICENSE.