stellarsecurity/laravel-hardening

Stellar Security hardening guard for Laravel (blocks APP_DEBUG=true on production-like hosts).

Maintainers

Package info

github.com/StellarSecurity-Packages/stellar-laravel-hardening

pkg:composer/stellarsecurity/laravel-hardening

Statistics

Installs: 150

Dependents: 0

Suggesters: 0

Stars: 0

Open Issues: 0

Security

Advisories: 0

Aikido package health analysis

v1.0.0 2025-12-10 01:15 UTC

Requires

  • php: ^8.0

proprietary c30351f035751b27fcb004cff894547c137a3424

This package is not auto-updated.

Last update: 2026-02-25 23:56:21 UTC

README

Tiny Laravel package that protects you from pushing APP_DEBUG=true to anything that smells like production.

What it does

  • Looks at:
    • APP_ENV / config('app.env')
    • APP_DEBUG / config('app.debug')
    • Current HTTP host
    • WEBSITE_SITE_NAME (Azure App Service)
  • If the environment is "production-like" and debug is enabled, it:
    • Logs a critical message
    • Aborts with HTTP 500

Install

composer require stellarsecurity/laravel-hardening

The service provider is auto-discovered.

Publish the config if you want to tweak the rules:

php artisan vendor:publish --tag=config --provider="Stellar\LaravelHardening\Providers\StellarHardeningServiceProvider"

Then edit config/stellar_hardening.php.