# Checkpoint

A Laravel security scanner that checks an app for known CVEs, risky settings and hardcoded secrets with one Artisan command.

The command is php artisan checkpoint:scan. It runs composer audit and npm audit. It also checks .env settings and file permissions. It looks for risky code, such as raw SQL with variables or unescaped Blade output.

- Made by: [Andrea Pollastri](https://github.com/andreapollastri)
- Shipped: 27/04/2026
- Date from: [release](https://github.com/andreapollastri/checkpoint/releases/tag/1.0.0)
- Source: [github.com/andreapollastri/checkpoint](https://github.com/andreapollastri/checkpoint)
- Docs: [checkpoint.web.ap.it](https://checkpoint.web.ap.it)
- Install: `composer require andreapollastri/checkpoint`
- Licence: MIT
- Stack: Laravel
- Checked: 23/10/2026
- Added: 23/10/2026

See more at [phplives.dev](https://phplives.dev)