Laravel Console Wizard

 Laravel Console WIzzard is a package for creating multi-step wizards with complex input inside the console. Its primary purpose is to collect data for file generators—here’s an example from the project’s readme:

 1namespace App\Console\Commands;
 2 
 3use Shomisha\LaravelConsoleWizard\Command\Wizard;
 4use Shomisha\LaravelConsoleWizard\Steps\ChoiceStep;
 5use Shomisha\LaravelConsoleWizard\Steps\TextStep;
 6 
 7class IntroductionWizard extends Wizard
 8{
 9    protected $signature = "wizard:introduction";
10 
11    protected $description = 'Introduction wizard.';
12 
13    public function getSteps(): array
14    {
15        return [
16            'name'   => new TextStep("What's your name?"),
17            'age'    => new TextStep("How old are you?"),
18            'gender' => new ChoiceStep("Your gender?", ["Male", "Female"]),
19        ];
20    }
21 
22    public function completed()
23    {
24        $this->line(sprintf(
25            "This is %s and %s is %s years old.",
26            $this->answers->get('name'),
27            ($this->answers->get('gender') === 'Male') ? 'he' : 'she',
28            $this->answers->get('age')
29        ));
30    }
31}

This package works by defining a set of steps and then once completed, you can process data for output, generate files, or perform whatever you need to with the data.

• TextStep – expects a text input answer (i.e., name)
• MultipleAnswerTextStep – similar to TextStep, except it takes multiple answers and returns them in an array
• ChoiceStep – this allows a user to pick one answer from multiple choices
• MultipleChoiceStep – similar to ChoiceStep, but allows the user to pick multiple choices and returns the values as an array
• UniqueMultipleChoiceStep – just like MultipleChoiceStep, but does not allow a user to select a single choice more than once
• ConfirmStep – the user confirms yes or no, and this step returns a Boolean.

Read More

CLI to Check For PHP Security Vulnerabilities

 Enlightn Security Checker (from the folks behind Enlightn) is a command-line tool that checks if your application uses dependencies with known security vulnerabilities.

You can install it globally via composer to start checking projects:

1composer global require enlightn/security-checker

Using the security-checker CLI, you provide a path to your project’s composer.lock file to get a report of any vulnerabilities:

 1⇒ security-checker security:check /path/to/composer.lock
 2{
 3    "laravel\/framework": {
 4        "version": "5.7.29",
 5        "time": "2020-04-14T14:16:19+00:00",
 6        "advisories": [
 7            {
 8                "title": "RCE vulnerability in \"cookie\" session driver",
 9                "link": "https:\/\/blog.laravel.com\/laravel-cookie-security-releases",
10                "cve": null
11            }
12        ]
13    },
14    "robrichards\/xmlseclibs": {
15        "version": "2.1.1",
16        "time": "2019-11-05T11:51:00+00:00",
17        "advisories": [
18            {
19                "title": "Filter input to avoid XPath injection",
20                "link": "https:\/\/github.com\/robrichards\/xmlseclibs\/commit\/649032643f7aac493e91ca318da0339aec72aa4a",
21                "cve": null
22            }
23        ]
24    }
25}

You can programmatically get a report with the following PHP code:

 1use Enlightn\SecurityChecker\SecurityChecker;
 2 
 3$result = (new SecurityChecker)->check('/path/to/composer.lock');
 4 
 5/*
 6{
 7  "laravel/framework": {
 8    "version": "8.22.0",
 9    "time": "2021-01-13T13:37:56+00:00",
10    "advisories": [{
11      "title": "Unexpected bindings in QueryBuilder",
12      "link": "https://blog.laravel.com/security-laravel-62011-7302-8221-released",
13      "cve": null
14    }]
15  }
16}
17*/

The Enlightn Security Checker uses the security advisories database to reference known security vulnerabilities in PHP projects and libraries. You can learn more about this package and view the source code on GitHub.

Read More

Generate a Postman Collection from Laravel Routes

 Laravel API to Postman is a package by Andreas Elia that allows you to automatically generate a Postman collection based on your app’s API routes.

After you install the package, you can run the following artisan command, which will automatically generate a postman collection by introspecting your app’s API routes:

1php artisan export:postman

Postman is a popular API development GUI that simplifies building and testing APIs. Once you have a collection of API endpoints from your Laravel app, you can easily share them with your team through Postman.

You can learn more about this package, get full installation instructions, and view the source code on GitHub.

Read More