PlumbPHP

Mechanically-verifiable scores for PHP packages. Security, maintenance, ecosystem health — every result explainable down to the check. 📐

[PlumbPHP @PlumbPHP]

Plumb checks now explain themselves in plain language, and each one links to a practical guide: SHA-pinning Actions, adding a SECURITY.md, setting an update cooldown, trimming your dist archive. Free, no sign-up. https://t.co/mhUEyAKFKF

[PlumbPHP @PlumbPHP]

@mrk_j It first has to be set in your dependabot config (here is an example: https://t.co/p9YmLDTQqq)

And then it can also help to put a comment tag next to it, Dependabot will also update that comment when it does it's updates.
https://t.co/rdpwOHYNdg

[PlumbPHP @PlumbPHP]

So excited to be featured by @DailyLaravel in one of their most recent videos.

Thank you so much to @PovilasKorop for such a kind and thorough review!

Check it out!

https://t.co/PH9pRZya9f

[PlumbPHP @PlumbPHP]

Missing a package on Plumb? Now you can request it 📦

Search for it, hit "Request it", and optionally drop your email — we'll check Packagist, queue a priority scan, and email you when it's scored.

The shared daily scan cap is gone, too.

https://t.co/lRZzpFkeZ4

[PlumbPHP @PlumbPHP]

Stickers hot off the presses just in time for @LaraconUS 2026!