What is Freshbase?
Freshbase automatically monitors the Composer packages your projects depend on, alerting you to new security vulnerabilities as soon as they are discovered. It provides a detailed initial report and ongoing monthly analyses, giving you clear guidance on which packages need updating or have been abandoned. By keeping your dependencies current, you avoid the risk of falling too far behind on updates, which can lead to major rewrites and security gaps.
The service is designed to save developers time and reduce the manual effort of tracking package updates. Instead of checking each package individually, you receive instant notifications and a simple step-by-step monthly report outlining exactly what actions to take. Freshbase also identifies when version constraints (such as ^4.0 in composer.json) need to be updated, a step that the standard composer update command does not handle.
Features
- Instant Vulnerability Alerts: Receive immediate email notifications when a package you use has a new security vulnerability.
- Monthly Update Reports: Get a simple step-by-step guide each month on how to bring your project up to date.
- Version Constraint Updates: Know when you need to update version constraints in composer.json, which composer update does not do.
- Initial Project Report: Submit your composer files to receive a full browser report of existing vulnerabilities, outdated packages, and abandoned packages.
- Unlimited Projects During Beta: During the beta period, you can monitor unlimited projects for free.
Use Cases
- Keeping Laravel projects secure by monitoring for new vulnerabilities in the framework and its packages.
- Managing multiple client projects to ensure all third-party dependencies are up to date.
- Avoiding major rewrites by staying on top of package updates incrementally.
- Complying with security policies that require timely patching of known vulnerabilities.
FAQs
-
Is Freshbase free to use?
Freshbase is 100% free during the beta period with unlimited projects. After beta, one personal project will always remain free. -
How does Freshbase notify me of vulnerabilities?
Freshbase sends an instant email alert when a package you are using has a new security vulnerability. -
What package managers does Freshbase support?
Freshbase currently supports Composer packages used in PHP projects. -
Can I monitor projects for multiple clients?
Yes, during beta you can monitor unlimited projects for free. Paid plans after beta include multiple projects.
