Skip to content

Security: N3XT0R/laravel-migration-generator

Security

SECURITY.md

Security Policy

πŸ“¬ Reporting a Vulnerability

If you discover a security vulnerability within this package, please do not disclose it publicly. Instead, report it directly and confidentially via:

  • Email: info@php-dev.info
  • GitHub Security Advisory: Submit here

We aim to respond to all valid reports within 72 hours and will coordinate disclosure responsibly.

πŸ”’ Supported Versions

Version Status Notes
8.x βœ… Supported Actively maintained
< 8.0 ❌ Unsupported Legacy, no security fixes

If you're using an unsupported version, we strongly recommend upgrading to the latest stable release.

πŸ§ͺ Security Considerations

This package performs introspection on database schemas and writes files to disk. As such, you should:

  • Avoid using it with untrusted or manipulated database schemas.
  • Run generators only in trusted development environments.
  • Always verify generated migrations and models before committing.

πŸ” Dependencies

Dependencies are managed via Composer and adhere to FriendsOfPHP/security-advisories via composer audit.

Use:

composer audit

There aren’t any published security advisories