LaraBeacon 3 picks up where Enlightn stopped—and adds a second pass for AI-written Laravel

Anthony Bär — Thu, 27 Aug 2026 17:24:31 +0000

Enlightn was one of those Laravel packages that earned a permanent place in many require-dev sections. One Artisan command checked far more than code style: production configuration, security headers, queue settings, database usage, caching, and the small deployment details that tend to surface at the worst possible time.

Its final release supports Laravel 9 through 11. Packagist now marks the package as abandoned. That leaves teams moving to Laravel 12 or 13 with an awkward choice: remove a useful release check, keep an old framework version around it, or maintain a private fork.

We chose a fourth option and continued the public package as LaraBeacon.

LaraBeacon 3 is a maintained LGPL-licensed fork of Enlightn's open-source core. The original Git history and attribution remain intact. The first release updates the package for Laravel 12 and 13, PHP 8.2 through 8.5, Larastan 3, and PHPStan 2, while keeping the useful idea intact: run a command and get practical findings about performance, security, and reliability.

composer require --dev baer-software/larabeacon:^3.0
php artisan larabeacon

There are 67 checks in the public package. They run locally and can be used in CI without creating an account. php artisan larabeacon --ci limits a pipeline run to checks that make sense in that environment; the remaining checks can run against a representative release candidate where services, headers, and production configuration are actually present.

A second pass for AI-written Laravel

That second pass has become more useful as more Laravel code is written with AI assistance.

AI can produce a convincing Laravel diff quickly. It cannot infer that a production app uses a different queue driver, that a header is missing at the edge, or that a local pass proves the deployed environment is ready.

LaraBeacon does not try to decide whether generated code is “good.” It checks concrete Laravel conditions in the environment where it runs and makes the remaining release questions visible.

The workflow is simple enough to hand back to the coding agent:

Run LaraBeacon with details.
Investigate every failed check in the context of the application.
Fix only confirmed problems.
Rerun the application tests and LaraBeacon.
Report anything that still needs human judgment.

Environment-dependent passes remain evidence for the scanned environment only. A local run is not proof of production configuration. LaraBeacon also does not prove that a feature matches the product intent, that every authorization rule is correct, or that the user experience makes sense.

That is the point of the separation: the agent can write the diff, LaraBeacon can inspect framework-specific release risks, and a human can still decide whether the result should ship.

The complete AI-assisted Laravel workflow includes a prompt that can be pasted into Codex, Claude Code, Cursor, or another coding agent.

Migration is small, but it deserves a review

We did not try to disguise the fork as an unrelated new invention. Existing Enlightn users should recognise the workflow and much of the analyzer architecture.

The package name, PHP namespace, configuration file, and Artisan commands have changed, so migration deserves a short review rather than a blind Composer substitution. The migration guide covers the concrete changes and recommends comparing the last Enlightn result with the first LaraBeacon run before creating a new baseline.

The 3.0 work also removed assumptions that no longer hold in current Laravel applications. It supports the PHP-Parser 5 API used during baseline generation, PHPStan 2 extension APIs, Laravel 13 queue defaults, and current Vite output. Installation is tested as a real Composer dependency across the supported Laravel and PHP combinations, not only inside the package repository.

Core remains useful on its own

LaraBeacon Pro and LaraBeacon Cloud exist, but neither is required to use Core.

Pro is a separate package with additional independently implemented checks. Core remains fully useful offline. Cloud reporting is optional and only happens when a run is started with --report; source snippets and exception stack traces are excluded by default, and either requires a separate explicit opt-in.

This release is the beginning of the maintenance line, not a claim that every old assumption has already been rediscovered. Real applications are where analyzers meet unusual deployment conventions, custom filesystem layouts, and the less photogenic corners of long-lived Laravel codebases.

If LaraBeacon produces a questionable result, misses a modern pattern, or makes migration unnecessarily difficult, please open an issue with a reproducible example.

The source is on GitHub, the package is available on Packagist, and the complete check catalogue and documentation live at larabeacon.com.

DEV Community: Anthony Bär

LaraBeacon 3 picks up where Enlightn stopped—and adds a second pass for AI-written Laravel

A second pass for AI-written Laravel

Migration is small, but it deserves a review

Core remains useful on its own