Ensemble provides detailed, automated, real-time alerting about the Composer dependencies of all of your apps. It's your own Elite Guard.
Free forever!Sign up now
When your apps use code created by third parties, you're opening the door to all sorts of potential problems. Are you sure those package developers are as security conscious as you are? What if...?
And it's not just security! What if those licenses change or there's a vulnerability discovered? Wouldn't it be great to find out automatically?
With Ensemble, you'll have all this and more (soon).
The last thing you need is to find out too late that one of your dependencies has a vulnerability that has been compromised. Ensemble alert you as soon as a vulnerability is found with any of the packages your project requires.
There are plenty of OS licenses out there. Occasionally dependencies change license. Knowing what your dependencies licenses are at a moments notice helps with compliance.
Even without vulnerabilities and license changes, just having an insight into outdated dependencies can remind you to check in on that project that's been deployed and untouched for a while.
Setting up Ensemble couldn't be simpler. Just follow a few easy steps to get the protection your apps deserve.
It only takes a moment! And you only need to do this once - unless you really enjoyed it, then who am I to stop you?
Get an App Key by adding your app to Ensemble. All Ensemble needs to know is a name and a URL.
The plugin is a Composer package that adds a single endpoint to your app.
Add your App Key in config or env.
Deploy your app to production where it's publicly accessible.
If everything is configured and your app is available publicly, within a few minutes you'll see your Composer dependencies loaded into Ensemble. Tomorrow you'll get an email telling you which of your apps have outdated dependencies.
Ensemble's a side project and I want it to have the widest reach possible because the security of the Internet is more important than making a few credits.
If you agree and if Ensemble proves useful to you, can I ask that you consider supporting its development by sponsoring me on GitHub? Any amount you choose to donate will be greatly appreciated and will help to cover the costs of hosting the service, supporting users and developing new features.
I also have a number of perks planned for Sponsors, so don't miss out!