Open source we build and depend on

Attach files to your models in named buckets, generate image variants, and serve them from any disk.

Native SVG QR codes with typed payloads — links, 2FA, Wi-Fi, vCards, SEPA transfers and PAY by square.

Single- and multi-language slugs for Eloquent — scoped uniqueness, locale-aware routing and 301s from old URLs.

Multilingual Eloquent attributes in a single JSON column — with a fallback chain so content never renders blank.

A multilingual, SEO-ready blog engine — translatable content, publishing lifecycle, categories and tags.

Exact, immutable money values — ISO 4217 currencies, rounding-safe math, discounts, tax and ECB exchange rates.

One API for App Store, Google Play and Stripe purchases and subscriptions — verified natively, recorded as models.

Manage advertisements, placements and pricing.

Create, manage and apply discount coupons with flexible rules.

Manage credit and wallet balances on any entity, with multiple buckets and display helpers.

An e-commerce foundation — products, variants, carts, orders, tax and stock across single or multiple shops.

Trading performance analytics — P&L, returns, streaks, profit factor, Sharpe and drawdown.

Polymorphic comments on any model — threaded replies, moderation, likes, reports, mentions and attachments.

Send campaigns to multiple recipients.

Many-to-many connections between models with permissions and expirations.

Typed polymorphic contacts (email, phone, URL, social) with normalization and vCard export.

Lightweight likes and typed reactions on any entity, with idempotent toggles.

Realtime threads and direct messages between entities using Laravel broadcasting.

Write reviews to any entity from any entity — star ratings, moderation, verified badges and helpful votes.

Database-defined, multi-step forms — per-field validation, drafts, file uploads and stored submissions.

Opening hours, seasonal schedules, holidays and bookable slots for any model — DST-correct and native.

Scheduling between entities — a status state machine, recurrence engine and ICS export.

Polymorphic approvals between models — quorum and weighted rules, delegation and staged pipelines.

Define and track multiple onboarding flows with required and optional steps.

Flag and moderate entities — typed reasons and a guarded resolution lifecycle.

Requests from entities with a built-in, native approvals subsystem.

Teams, roles, permissions and invitations — with ownership transfer and join requests.

Status lifecycles for Eloquent models — guarded transitions, race-free quotas, expiry, scheduling, rollbacks and history.

Turn any Eloquent query into dashboard-ready value, trend, progress and partition metrics.

Allow-list-driven filtering, sorting and capped pagination for API list endpoints — everything else is rejected.

Store billing, shipping or other addresses on any model via a polymorphic relationship.

Attach dynamic, typed key/value attributes to any model — with encryption, constraints and an audit trail.

Convenient helper methods for PHP enums — labels, options, collections and random values.

Global or per-entity settings with typed casts, encrypted values and in-request caching.

Headless multi-guard authentication — password, magic link, email code and passkey login, 2FA and JWT sessions.

Native, audited crypto primitives — JWS, JWK, X.509, TOTP, WebAuthn, HMAC and strict codecs, with zero config.

Query Google Places, Routes and Geocoding from Laravel — autocomplete, place search, geocoding, travel times and photos.

Throttle outgoing HTTP client requests — per-second to per-day limits, shared stores and adaptive backoff.

Native RS256 user tokens and HS256 service tokens — guards, a jti denylist and claim-based authorization.

Build Laravel packages on a fluent provider builder — publish-only migrations, key-type schema macros and config guards.

A native WebAuthn / FIDO2 passkey relying party — registration, sign-in and attestation with zero third-party crypto.

Native roles and permissions for any model — Gate-integrated, cache-backed and additive by default.

A typed Plausible Analytics client — query stats, capture server-side events and revenue, and provision sites.

Opaque, rotating refresh tokens and device sessions — hashed at rest, with reuse detection and one-call logout everywhere.

Dev-only Pest assertions that can always fail — migration order, config contracts, model swaps and arch presets.

Native TOTP two-factor authentication — encrypted secrets, single-use recovery codes and replay protection.

Schedule recurring health checks, send throttled alerts when they fail and fire events on escalation and recovery.

Provision TLS certificates from Laravel — native ACME/Let's Encrypt, wildcards and expiry monitoring.

Resolve a client's location and travel distance through pluggable geolocation providers.

Access GitHub, GitLab and Bitbucket through a single Laravel-native API — with webhooks and write ops.

A fluent, Eloquent-style client for the Kubernetes API — 20+ resources, logs, scale, rollout and watch.

Tamper-evident seals for Eloquent models, an append-only ledger, idempotency keys, nonces and RFC 9421 HTTP signatures.