Is this package built true?
Plumb scores PHP packages on Security, Maintenance, and Ecosystem Health — mechanically, against fixed references, not opinions.
(focused = false), 150)"
@input="selected = -1"
@keydown.down.prevent="moveDown()"
@keydown.up.prevent="moveUp()"
@keydown.enter.prevent="openSelected()"
@keydown.escape="
focused = false;
selected = -1;
$refs.searchInput.blur();
"
class="w-full pl-10 pr-4 sm:pr-12 py-2.5 rounded-lg border border-line bg-elevated text-ink placeholder-muted text-base sm:text-sm focus:outline-none focus:ring-2 focus:ring-accent/25 focus:border-accent transition-colors"
/>
Tracking 156,123 packages on the road to full Packagist coverage
Missing a package? — we'll scan it right away.
Used by
’s
official plugin directory
Recent scans
The latest packages scored by Plumb.
| Package | Score |
|---|---|
|
genai/messaging
Provider-agnostic messaging front (the third twin of genai/web and genai/console): the Producer/Consumer/MessageEvent contracts, a #[MessageHandler] attribute, a build-time MessageHandlerProcessor that compiles consumers.php, and a PHP 5.3-safe Worker runner that dispatches to handler beans. Ships NO broker — each app registers its own Consumer/Producer (Kafka, Pdo, SQS, ...). Shares the same compiled container as the web and CLI fronts.
|
73 Fair |
|
genai/dto
DTO support: a #[Dto] attribute, a build-time processor that compiles each DTO's getters into a JSON map, and a PHP 5.3-safe Serializer that turns DTOs (and nested/arrays of them) into arrays via that map — no runtime reflection, no toArray(). Standalone: no runtime dependencies.
|
73 Fair |
|
genai/openapi
Generates an OpenAPI 3 document at build time from your #[RestController] routes, request-body Forms/DTOs and validation constraints — baked into a reflection-free Cache\OpenApi — and ships a controller that serves /openapi.json and a Swagger UI page at /docs. PHP 5.3-safe at runtime.
|
73 Fair |
|
genai/rate-limit
Fixed-window rate limiting. A RateLimiter over a pluggable store (file-backed by default), plus a RateLimitInterceptor that returns 429 when an IP exceeds the limit on a path (brute-force / flood protection). PHP 5.3-safe.
|
73 Fair |
|
filipebastos0/buscador-cursos-alura
Projeto que busca os cursos no site da Alura
|
76 Fair |
|
genai/i18n
Localization for the GenAI stack — Spring-style message keys compiled from per-locale .ini catalogs into a reflection-free Cache\Messages, a Translator bean, a global __() view helper, and a LocaleInterceptor that resolves the request locale (?lang / session / Accept-Language). PHP 5.3-safe at runtime.
|
73 Fair |
|
genai/google-form
Submit data to a Google Form from the server: POST to the form's formResponse endpoint, mapping your fields to entry.NNN ids. Best-effort with a short timeout so it never blocks the request (it returns false rather than throwing). curl with a stream fallback. PHP 5.3-safe.
|
73 Fair |
| aw-studio/laravel-states | 66 Concerning |
|
genai/session
Session component with pluggable storage: native files (default), a project file dir (cache/session), or a database (PDO). A small Session API over native PHP sessions; a SessionStore save-handler decides where the data lives. Driver chosen from the [session] config group. PHP 5.3-safe runtime.
|
73 Fair |
|
genai/routing
Minimal PSR-4 standalone route matching engine (regexes baked at build, no runtime compilation), compatible with PHP 5.3.29. Attribute-driven routing (#[Route]) lives in genai/web.
|
73 Fair |
|
genai/http
Minimal HTTP layer (Request/Response/JsonResponse) and a Dispatcher that wires the router and container, compatible with PHP 5.3.29
|
73 Fair |
|
genai/property
Compile-time config (.env / .ini) binder: compiles #[Property] classes into a container fragment so config resolves as DI beans. Runtime is PHP 5.3.29.
|
70 Fair |
|
bitexpert/sylius-product-document-plugin
Product document plugin for Sylius.
|
65 Concerning |
|
hatemgodaphp/laravel-google-merchant-api
Laravel Google Merchant Products API for Google Shopping.
|
79 Fair |
|
hatem-azzouzi/z-di
Easy minimalist dependenncy injection package
|
72 Fair |
|
hatemfaysal/oto
package to integrate with oto shipping company api
|
69 Concerning |
| hatem/calculator | 54 Concerning |
|
dsplat/multi-tenant-saas-module-developer-portal
开发者门户 - API 文档、沙箱环境、SDK 管理
|
— |
|
alibabacloud/eiam-20211201
Alibaba Cloud Eiam (20211201) SDK Library for PHP
|
89 Good |
|
hatchyu/string-utils
Smart PHP string utilities for slugging, casing, transliteration, and unique hash generation
|
92 Good |
|
ssch/typo3-rector
Instant fixes for your TYPO3 PHP code by using Rector.
|
72 Fair |
|
dennisbusk/debug-notary
A Laravel package for debug notarization.
|
96 Good |
|
hatchyu/laravel-tenancy
Flexible, resolver-based multi-tenancy for Laravel (owner, organization, branch, subdomain, token-based).
|
75 Fair |
|
hatem-ghaly/using_curl
A simple example how to use CURL library
|
69 Concerning |
|
hatem-elsheref/whatsapp-business
WhatsApp Business SaaS Platform for Laravel - Multi-tenant, OAuth, WhatsApp Cloud API integration
|
88 Good |
|
hatchyu/laravel-settings
Enterprise-ready hierarchical multi-scope settings for Laravel with inheritance support, caching, and automatic value casting.
|
92 Good |
|
hatemben/mongodb-acl-bundle
MongoDB ACL Bundle
|
51 Concerning |
|
larastan/larastan
Larastan - Discover bugs in your code without running it. A phpstan/phpstan extension for Laravel
|
73 Fair |
|
empuxa/laravel-totp-login
Say goodbye to passwords and sign in via TOTP instead.
|
82 Fair |
|
cydrickn/swoole-runtime
Swoole / Openswoole Runtime
|
92 Good |
|
creativestyle/magesuite-google-api
Google API Extension
|
92 Good |
|
cahyadsn/ci4basic
CodeIgniter 4 Basic Boilerplate based on AdminLTE 3 with user management, roles, permissions, ...
|
81 Fair |
|
gamez/mite
Interact with mite (https://mite.de) from your PHP application.
|
75 Fair |
|
gaming-engine/core
The main pieces of the Gaming Engine
|
32 Poor |
|
conedevelopment/laravel-auth
Laravel auth package.
|
78 Fair |
|
gamewisp/are-you-a-human
Are You A Human Laravel 4 Implementation
|
69 Concerning |
|
gamevault/lunar-pensopay
A Lunar community payment driver for Pensopay
|
52 Concerning |
|
gamespecu/metrics
A laravel package for performance measurements and stats
|
36 Poor |
|
gaming-engine/dictionary
Dictionary implementation for PHP
|
66 Concerning |
|
gamez/duration
Working with durations made easy
|
75 Fair |
|
gamez/typed-collection
Type-safe collections based on Laravel Collections
|
79 Fair |
|
gamificador/creatures
Creatures package
|
85 Fair |
|
gaming-engine/dotenv-writer
Dot Env File Writer
|
66 Concerning |
|
gemz/port
Domain Port Check
|
48 Poor |
|
genai/console
CLI layer (the twin of genai/web): a #[Command] attribute, a build-time CommandProcessor that compiles commands.php, and a PHP 5.3-safe Console runner that maps $argv to a command bean. Shares the same compiled container as the web front.
|
73 Fair |
|
gen/swooleapi
Object-Relational-Mapper for PHP
|
85 Fair |
|
genai/container
Minimal PSR-11 dependency-injection container, compatible with PHP 5.3.29
|
70 Fair |
|
genai/boot
Application kernel with Composer-based package auto-discovery (Laravel style): reads each installed component's extra.genai.processors so the app never hand-lists them, then boots the compiled app into a ready Dispatcher. Build-time uses PHP 8; the Kernel + runtime boot are PHP 5.3-safe.
|
73 Fair |
|
gemz/geoip
Get GeoIp informations from ip-api.com
|
51 Concerning |
|
genai/attribute
Build-time attribute scanner that dispatches custom attributes to your handlers. PHP 8 only; it emits no runtime code itself — your handlers feed the PHP 5.3-safe *Register dumpers.
|
70 Fair |
genai/messaging
73
Fair
Provider-agnostic messaging front (the third twin of genai/web and genai/console): the Producer/Consumer/MessageEvent contracts, a #[MessageHandler] attribute, a build-time MessageHandlerProcessor that compiles consumers.php, and a PHP 5.3-safe Worker runner that dispatches to handler beans. Ships NO broker — each app registers its own Consumer/Producer (Kafka, Pdo, SQS, ...). Shares the same compiled container as the web and CLI fronts.
genai/dto
73
Fair
DTO support: a #[Dto] attribute, a build-time processor that compiles each DTO's getters into a JSON map, and a PHP 5.3-safe Serializer that turns DTOs (and nested/arrays of them) into arrays via that map — no runtime reflection, no toArray(). Standalone: no runtime dependencies.
genai/openapi
73
Fair
Generates an OpenAPI 3 document at build time from your #[RestController] routes, request-body Forms/DTOs and validation constraints — baked into a reflection-free Cache\OpenApi — and ships a controller that serves /openapi.json and a Swagger UI page at /docs. PHP 5.3-safe at runtime.
genai/rate-limit
73
Fair
Fixed-window rate limiting. A RateLimiter over a pluggable store (file-backed by default), plus a RateLimitInterceptor that returns 429 when an IP exceeds the limit on a path (brute-force / flood protection). PHP 5.3-safe.
filipebastos0/buscador-cursos-alura
76
Fair
Projeto que busca os cursos no site da Alura
genai/i18n
73
Fair
Localization for the GenAI stack — Spring-style message keys compiled from per-locale .ini catalogs into a reflection-free Cache\Messages, a Translator bean, a global __() view helper, and a LocaleInterceptor that resolves the request locale (?lang / session / Accept-Language). PHP 5.3-safe at runtime.
genai/google-form
73
Fair
Submit data to a Google Form from the server: POST to the form's formResponse endpoint, mapping your fields to entry.NNN ids. Best-effort with a short timeout so it never blocks the request (it returns false rather than throwing). curl with a stream fallback. PHP 5.3-safe.
aw-studio/laravel-states
66
Concerning
genai/session
73
Fair
Session component with pluggable storage: native files (default), a project file dir (cache/session), or a database (PDO). A small Session API over native PHP sessions; a SessionStore save-handler decides where the data lives. Driver chosen from the [session] config group. PHP 5.3-safe runtime.
genai/routing
73
Fair
Minimal PSR-4 standalone route matching engine (regexes baked at build, no runtime compilation), compatible with PHP 5.3.29. Attribute-driven routing (#[Route]) lives in genai/web.
genai/http
73
Fair
Minimal HTTP layer (Request/Response/JsonResponse) and a Dispatcher that wires the router and container, compatible with PHP 5.3.29
genai/property
70
Fair
Compile-time config (.env / .ini) binder: compiles #[Property] classes into a container fragment so config resolves as DI beans. Runtime is PHP 5.3.29.
bitexpert/sylius-product-document-plugin
65
Concerning
Product document plugin for Sylius.
hatemgodaphp/laravel-google-merchant-api
79
Fair
Laravel Google Merchant Products API for Google Shopping.
hatem-azzouzi/z-di
72
Fair
Easy minimalist dependenncy injection package
hatemfaysal/oto
69
Concerning
package to integrate with oto shipping company api
hatem/calculator
54
Concerning
dsplat/multi-tenant-saas-module-developer-portal
—
开发者门户 - API 文档、沙箱环境、SDK 管理
alibabacloud/eiam-20211201
89
Good
Alibaba Cloud Eiam (20211201) SDK Library for PHP
hatchyu/string-utils
92
Good
Smart PHP string utilities for slugging, casing, transliteration, and unique hash generation
ssch/typo3-rector
72
Fair
Instant fixes for your TYPO3 PHP code by using Rector.
dennisbusk/debug-notary
96
Good
A Laravel package for debug notarization.
hatchyu/laravel-tenancy
75
Fair
Flexible, resolver-based multi-tenancy for Laravel (owner, organization, branch, subdomain, token-based).
hatem-ghaly/using_curl
69
Concerning
A simple example how to use CURL library
hatem-elsheref/whatsapp-business
88
Good
WhatsApp Business SaaS Platform for Laravel - Multi-tenant, OAuth, WhatsApp Cloud API integration
hatchyu/laravel-settings
92
Good
Enterprise-ready hierarchical multi-scope settings for Laravel with inheritance support, caching, and automatic value casting.
hatemben/mongodb-acl-bundle
51
Concerning
MongoDB ACL Bundle
larastan/larastan
73
Fair
Larastan - Discover bugs in your code without running it. A phpstan/phpstan extension for Laravel
empuxa/laravel-totp-login
82
Fair
Say goodbye to passwords and sign in via TOTP instead.
cydrickn/swoole-runtime
92
Good
Swoole / Openswoole Runtime
creativestyle/magesuite-google-api
92
Good
Google API Extension
cahyadsn/ci4basic
81
Fair
CodeIgniter 4 Basic Boilerplate based on AdminLTE 3 with user management, roles, permissions, ...
gamez/mite
75
Fair
Interact with mite (https://mite.de) from your PHP application.
gaming-engine/core
32
Poor
The main pieces of the Gaming Engine
conedevelopment/laravel-auth
78
Fair
Laravel auth package.
gamewisp/are-you-a-human
69
Concerning
Are You A Human Laravel 4 Implementation
gamevault/lunar-pensopay
52
Concerning
A Lunar community payment driver for Pensopay
gamespecu/metrics
36
Poor
A laravel package for performance measurements and stats
gaming-engine/dictionary
66
Concerning
Dictionary implementation for PHP
gamez/duration
75
Fair
Working with durations made easy
gamez/typed-collection
79
Fair
Type-safe collections based on Laravel Collections
gamificador/creatures
85
Fair
Creatures package
gaming-engine/dotenv-writer
66
Concerning
Dot Env File Writer
gemz/port
48
Poor
Domain Port Check
genai/console
73
Fair
CLI layer (the twin of genai/web): a #[Command] attribute, a build-time CommandProcessor that compiles commands.php, and a PHP 5.3-safe Console runner that maps $argv to a command bean. Shares the same compiled container as the web front.
gen/swooleapi
85
Fair
Object-Relational-Mapper for PHP
genai/container
70
Fair
Minimal PSR-11 dependency-injection container, compatible with PHP 5.3.29
genai/boot
73
Fair
Application kernel with Composer-based package auto-discovery (Laravel style): reads each installed component's extra.genai.processors so the app never hand-lists them, then boots the compiled app into a ready Dispatcher. Build-time uses PHP 8; the Kernel + runtime boot are PHP 5.3-safe.
gemz/geoip
51
Concerning
Get GeoIp informations from ip-api.com
genai/attribute
70
Fair
Build-time attribute scanner that dispatches custom attributes to your handlers. PHP 8 only; it emits no runtime code itself — your handlers feed the PHP 5.3-safe *Register dumpers.
For developers
Integrate Plumb scores into your toolchain via the public JSON API. No key required.