Scanner Release Notes

Calibrated grading

• Checks calibrated against 41 open source Laravel applications; the Laravel skeleton and official starter kits grade A
• Routes resolved the way Laravel registers them: group middleware, prefixes, provider-mapped files, middleware aliases and controller middleware
• Advisory checks: heuristics are shown to maintainers but no longer count toward the grade
• Known vulnerabilities from the Packagist advisory database, counted once per package, with a 14-day grace period for new advisories
• 39 checks: the hand-maintained insecure-package list (SS056) is replaced by the advisory database