The recent Packagist and Composer security update matters because it moves the PHP ecosystem away from best-effort trust and toward stronger release controls, malware filtering, and immutable versions.
TrapDoor stood out because it was not tied to one package registry. It spread across npm, PyPI, and crates.io while targeting crypto developers, AI tooling, and developer workstations.
The poisoned Nx Console release and the resulting GitHub employee-device compromise showed how a developer extension can become a platform-level supply chain problem.
Laravel Paper lets you use Eloquent against Markdown and JSON files, keeping the familiar Laravel model workflow without reaching for a database first.
Laravel Introspect turns parts of your Laravel application into something you can query with a fluent API: views, routes, classes, and Eloquent models.