Check an extension manifest before installation
Inspect a package manifest before installation and verify its declarations for public surfaces, sensitive data and outbound HTTP. The build audit should reject an incompatible API version or unsafe cache claim.
Read more Show less
It reads like an app-store privacy label for a plugin, so agency teams vet a package before it lands near a client. The build audit backs it up: it fails at CI if a cacheable package would poison a shared cache or pins an incompatible API version, catching the mistake before a live site does.
Trade-off to assess: This assumes teams are willing to work in Laravel packages at all. A team that only wants a hosted admin with no code ownership will find the whole model heavier than they want.






