Packages

NPM

https://verdaccio.org/docs/what-is-verdaccio https://cheatsheetseries.owasp.org/cheatsheets/NPM_Security_Cheat_Sheet.html#6-use-a-local-npm-proxy

PHP

https://cheatsheetseries.owasp.org/cheatsheets/PHP_Configuration_Cheat_Sheet.html https://snuffleupagus.readthedocs.io/

https://github.com/fabpot/local-php-security-checker

Standards, helpers etc

• squizlabs/php_codesniffer
• pheromone/phpcs-security-audit
• dealerdirect/phpcodesniffer-composer-installer
• slevomat/coding-standard
• phpstan/phpstan - https://phpstan.org/
  • phpstan/phpstan-deprecation-rules
  • spaze/phpstan-disallowed-calls