Open-source packages & tools I build and maintain.

Zero-dependency encryption library for JavaScript and TypeScript, built exclusively on the Web Crypto API. Designed for developers who need modern cryptographic primitives without external dependencies.

• AES-256-GCM encryption
• PBKDF2 key derivation
• Timing attack protection
• Zero dependencies

Laravel package for polymorphic SaaS memberships — manages who belongs to what and with which role across any Eloquent model. Designed for multi-tenant SaaS apps, teams, and workspaces.

• Polymorphic across any Eloquent model
• Enum-based roles with hierarchy
• Guard protections (last owner, self-demotion)
• Event dispatching + query scopes
• PHP 8.3+ · Laravel 11/12/13

Laravel package for field-level encryption on Eloquent models — AES-256-GCM encryption with a natural developer experience. Built for GDPR and HIPAA compliance contexts.

• AES-256-GCM encryption with random IV per value
• Searchable encrypted fields via blind indexes (HMAC-SHA256)
• Key rotation without downtime
• Field masking & serialization protection
• Audit logging for access trails (GDPR/HIPAA)
• PHP 8.3+ · Laravel 11/12/13

Laravel package for generic, email-based invitations — invite anyone to any Eloquent model: teams, projects, workspaces, documents. Framework-agnostic, with no dependency on Jetstream, Breeze, or any starter kit.

• Invite to any Eloquent model (polymorphic)
• Secure HMAC token-based workflow
• Queued email notifications + i18n
• Extensible acceptance handlers & events
• Rate-limited routes · PHP 8.3+ · Laravel 11/12/13

Config-driven ports & adapters foundation for integrating external providers in Laravel. Adding a provider is one isolated adapter class plus a config entry — business logic, routing, and webhooks stay untouched.

• Config-driven drivers (ports & adapters)
• Context routing by country / tenant
• Normalized inbound webhook pipeline
• Provider-agnostic canonical events + idempotency
• Domain-free · Octane / FrankenPHP safe

Sequential, gap-free, concurrency-safe document numbers for Laravel — invoices, quotes and credit notes. Under concurrent load, two callers can never take the same number or leave a hole in the sequence.

• Gap-free, legally-compliant sequences
• Concurrency-safe via database row locks
• Per-scope counters (company / tenant / branch)
• Configurable patterns + yearly/monthly resets
• MySQL · PostgreSQL · SQLite · Octane-safe

Native Peppol BIS 3.0 (UBL) & EN 16931 e-invoice generation and dispatch for Laravel — built directly on PHP's ext-dom with zero third-party runtime dependencies. Pluggable networks (Peppol access points, French PDPs) with per-country routing.

• Native UBL & EN 16931 CII generators (no UBL libs)
• Zero third-party runtime dependencies (security policy)
• Pluggable networks + per-country routing
• Neutral CanonicalInvoice domain model
• EN 16931 validation + lifecycle events

A PHP compiler written in Rust that compiles a subset of PHP to native machine code via a custom SSA IR and an LLVM backend. Exploring ahead-of-time compilation for serverless, edge, and high-density workloads.

• PHP → native binaries via LLVM
• Custom SSA IR + optimization passes (DCE, constant folding)
• JavaScript / WASM backends
• Tiny binaries, instant startup (cloud-native)
• Active compiler R&D