Current state with latest updates

config/security-report.php

@@ -0,0 +1,30 @@
+<?php
+
+return [
+    'enabled' => env('SECURITY_REPORT_ENABLED', true),
+
+    'notify_email' => env('SECURITY_REPORT_NOTIFY_EMAIL', env('MAIL_FROM_ADDRESS')),
+
+    'scan' => [
+        'composer' => env('SECURITY_REPORT_SCAN_COMPOSER', true),
+        'npm' => env('SECURITY_REPORT_SCAN_NPM', true),
+    ],
+
+    'store_raw' => env('SECURITY_REPORT_STORE_RAW', true),
+
+    'max_raw_kb' => (int) env('SECURITY_REPORT_MAX_RAW_KB', 512),
+
+    'fail_on' => [
+        'high' => env('SECURITY_REPORT_FAIL_ON_HIGH', false),
+        'critical' => env('SECURITY_REPORT_FAIL_ON_CRITICAL', false),
+    ],
+
+    'commands' => [
+        'composer_audit' => ['composer', 'audit', '--format=json', '--locked'],
+        'composer_outdated' => ['composer', 'outdated', '--direct', '--format=json'],
+        'npm_audit' => ['npm', 'audit', '--json'],
+        'npm_outdated' => ['npm', 'outdated', '--json'],
+    ],
+
+    'timeout_seconds' => 180,
+];