Is this package built true?

Plumb scores PHP packages on Security, Maintenance, and Ecosystem Health — mechanically, against fixed references, not opinions.

Tracking 156,123 packages on the road to full Packagist coverage

Missing a package? — we'll scan it right away.

Used by Filament’s official plugin directory

Recent scans

The latest packages scored by Plumb.

genai/messaging
73 Fair
Provider-agnostic messaging front (the third twin of genai/web and genai/console): the Producer/Consumer/MessageEvent contracts, a #[MessageHandler] attribute, a build-time MessageHandlerProcessor that compiles consumers.php, and a PHP 5.3-safe Worker runner that dispatches to handler beans. Ships NO broker — each app registers its own Consumer/Producer (Kafka, Pdo, SQS, ...). Shares the same compiled container as the web and CLI fronts.
genai/dto
73 Fair
DTO support: a #[Dto] attribute, a build-time processor that compiles each DTO's getters into a JSON map, and a PHP 5.3-safe Serializer that turns DTOs (and nested/arrays of them) into arrays via that map — no runtime reflection, no toArray(). Standalone: no runtime dependencies.
genai/openapi
73 Fair
Generates an OpenAPI 3 document at build time from your #[RestController] routes, request-body Forms/DTOs and validation constraints — baked into a reflection-free Cache\OpenApi — and ships a controller that serves /openapi.json and a Swagger UI page at /docs. PHP 5.3-safe at runtime.
genai/rate-limit
73 Fair
Fixed-window rate limiting. A RateLimiter over a pluggable store (file-backed by default), plus a RateLimitInterceptor that returns 429 when an IP exceeds the limit on a path (brute-force / flood protection). PHP 5.3-safe.
filipebastos0/buscador-cursos-alura
76 Fair
Projeto que busca os cursos no site da Alura
genai/i18n
73 Fair
Localization for the GenAI stack — Spring-style message keys compiled from per-locale .ini catalogs into a reflection-free Cache\Messages, a Translator bean, a global __() view helper, and a LocaleInterceptor that resolves the request locale (?lang / session / Accept-Language). PHP 5.3-safe at runtime.
genai/google-form
73 Fair
Submit data to a Google Form from the server: POST to the form's formResponse endpoint, mapping your fields to entry.NNN ids. Best-effort with a short timeout so it never blocks the request (it returns false rather than throwing). curl with a stream fallback. PHP 5.3-safe.
aw-studio/laravel-states
66 Concerning
genai/session
73 Fair
Session component with pluggable storage: native files (default), a project file dir (cache/session), or a database (PDO). A small Session API over native PHP sessions; a SessionStore save-handler decides where the data lives. Driver chosen from the [session] config group. PHP 5.3-safe runtime.
genai/routing
73 Fair
Minimal PSR-4 standalone route matching engine (regexes baked at build, no runtime compilation), compatible with PHP 5.3.29. Attribute-driven routing (#[Route]) lives in genai/web.
genai/http
73 Fair
Minimal HTTP layer (Request/Response/JsonResponse) and a Dispatcher that wires the router and container, compatible with PHP 5.3.29
genai/property
70 Fair
Compile-time config (.env / .ini) binder: compiles #[Property] classes into a container fragment so config resolves as DI beans. Runtime is PHP 5.3.29.
bitexpert/sylius-product-document-plugin
65 Concerning
Product document plugin for Sylius.
hatemgodaphp/laravel-google-merchant-api
79 Fair
Laravel Google Merchant Products API for Google Shopping.
hatem-azzouzi/z-di
72 Fair
Easy minimalist dependenncy injection package
hatemfaysal/oto
69 Concerning
package to integrate with oto shipping company api
hatem/calculator
54 Concerning
dsplat/multi-tenant-saas-module-developer-portal
开发者门户 - API 文档、沙箱环境、SDK 管理
alibabacloud/eiam-20211201
89 Good
Alibaba Cloud Eiam (20211201) SDK Library for PHP
hatchyu/string-utils
92 Good
Smart PHP string utilities for slugging, casing, transliteration, and unique hash generation
ssch/typo3-rector
72 Fair
Instant fixes for your TYPO3 PHP code by using Rector.
dennisbusk/debug-notary
96 Good
A Laravel package for debug notarization.
hatchyu/laravel-tenancy
75 Fair
Flexible, resolver-based multi-tenancy for Laravel (owner, organization, branch, subdomain, token-based).
hatem-ghaly/using_curl
69 Concerning
A simple example how to use CURL library
hatem-elsheref/whatsapp-business
88 Good
WhatsApp Business SaaS Platform for Laravel - Multi-tenant, OAuth, WhatsApp Cloud API integration
hatchyu/laravel-settings
92 Good
Enterprise-ready hierarchical multi-scope settings for Laravel with inheritance support, caching, and automatic value casting.
hatemben/mongodb-acl-bundle
51 Concerning
MongoDB ACL Bundle
larastan/larastan
73 Fair
Larastan - Discover bugs in your code without running it. A phpstan/phpstan extension for Laravel
empuxa/laravel-totp-login
82 Fair
Say goodbye to passwords and sign in via TOTP instead.
cydrickn/swoole-runtime
92 Good
Swoole / Openswoole Runtime
creativestyle/magesuite-google-api
92 Good
Google API Extension
cahyadsn/ci4basic
81 Fair
CodeIgniter 4 Basic Boilerplate based on AdminLTE 3 with user management, roles, permissions, ...
gamez/mite
75 Fair
Interact with mite (https://mite.de) from your PHP application.
gaming-engine/core
32 Poor
The main pieces of the Gaming Engine
conedevelopment/laravel-auth
78 Fair
Laravel auth package.
gamewisp/are-you-a-human
69 Concerning
Are You A Human Laravel 4 Implementation
gamevault/lunar-pensopay
52 Concerning
A Lunar community payment driver for Pensopay
gamespecu/metrics
36 Poor
A laravel package for performance measurements and stats
gaming-engine/dictionary
66 Concerning
Dictionary implementation for PHP
gamez/duration
75 Fair
Working with durations made easy
gamez/typed-collection
79 Fair
Type-safe collections based on Laravel Collections
gamificador/creatures
85 Fair
Creatures package
gaming-engine/dotenv-writer
66 Concerning
Dot Env File Writer
gemz/port
48 Poor
Domain Port Check
genai/console
73 Fair
CLI layer (the twin of genai/web): a #[Command] attribute, a build-time CommandProcessor that compiles commands.php, and a PHP 5.3-safe Console runner that maps $argv to a command bean. Shares the same compiled container as the web front.
gen/swooleapi
85 Fair
Object-Relational-Mapper for PHP
genai/container
70 Fair
Minimal PSR-11 dependency-injection container, compatible with PHP 5.3.29
genai/boot
73 Fair
Application kernel with Composer-based package auto-discovery (Laravel style): reads each installed component's extra.genai.processors so the app never hand-lists them, then boots the compiled app into a ready Dispatcher. Build-time uses PHP 8; the Kernel + runtime boot are PHP 5.3-safe.
gemz/geoip
51 Concerning
Get GeoIp informations from ip-api.com
genai/attribute
70 Fair
Build-time attribute scanner that dispatches custom attributes to your handlers. PHP 8 only; it emits no runtime code itself — your handlers feed the PHP 5.3-safe *Register dumpers.

For developers

Integrate Plumb scores into your toolchain via the public JSON API. No key required.