zappzarapp/security

Comprehensive PHP security library: CSP, Security Headers, CSRF, Cookies, Password Validation, Input Sanitization, Rate Limiting, SRI, and Audit Logging

v1.0.0 2026-02-12 03:01 UTC

Requires

• php: ^8.4
• ext-dom: *
• ext-libxml: *
• ext-sodium: *

Requires (Dev)

• ext-fileinfo: *
• captainhook/captainhook: *
• captainhook/plugin-composer: ^5.3
• cyclonedx/cyclonedx-php-composer: ^6.1
• deptrac/deptrac: ^4.5
• ekino/phpstan-banned-code: ^3.0
• friendsofphp/php-cs-fixer: ^3.91
• giorgiosironi/eris: ^1.0
• infection/infection: *
• phpdocumentor/phpdocumentor: ^3.6
• phpmd/phpmd: ^2.15
• phpstan/phpstan: ^2.1
• phpunit/phpunit: ^12.4
• psr/http-client: ^1.0
• psr/http-factory: ^1.1
• psr/log: ^1.1 || ^3.0
• rector/rector: ^2.3
• roave/security-advisories: dev-latest
• vimeo/psalm: ^6.14

Suggests

• ext-memcached: For Memcached rate limit storage
• ext-redis: For Redis rate limit storage (phpredis extension)
• predis/predis: For Redis rate limit storage (pure PHP client)
• psr/http-client: For PSR-18 HTTP client support in PwnedPasswordChecker
• psr/http-factory: For PSR-17 HTTP factory support in PwnedPasswordChecker
• psr/log: For security event audit logging (PSR-3)

MIT

• Marc Straube

• security
• password
• headers
• csrf
• xss
• sanitization
• csp
• sri
• content-security-policy
• hsts
• rate-limiting
• subresource-integrity
• php8
• audit-logging