Requirements

• PHP 8.4 or newer — CI tests 8.4, 8.5 and 8.6
• Laravel 13 — illuminate/bus, cache, console, contracts, database, encryption, events, http, queue, routing, support, translation and validation ^13.0
• ext-curl — outbound connections are pinned with CURLOPT_RESOLVE — and ext-json
• ext-intl suggested — without it, international (IDN) webhook host names are refused
• symfony/uid ^7.4 or ^8.0
• MySQL or PostgreSQL (SQLite in tests)
• A queue worker and Laravel’s scheduler — deliveries are processed only on the queue, and webhooks:retry runs every minute

Built on Roundly packages

Installed by Composer; besides Laravel’s own components and symfony/uid, nothing else runs at runtime:

• Sentinel for Laravel ^2.2 — every HMAC through Sentinel::macs(), RFC 9421 signatures with deferred nonces, idempotency
• Safe Fetch for Laravel ^1.0 — the SSRF guard
• HTTP Client Rate Limits for Laravel ^2.0 — the per-endpoint throttle and Retry-After
• crypto-for-laravel ^2.1 — randomness, digests and codecs
• enums-for-laravel ^2.0 and package-toolkit-for-laravel ^2.0