Laravel package adds three tools to scrub secrets from logs without breaking debug data

The open-source PHP package cleaniquecoders/pii-protection has been updated with three new components — SecretScrubber, LiteralScrubber, and RedactedStrategy — designed to redact machine credentials from application logs. The update addresses a key distinction between personal data (PII) and infrastructure secrets such as passwords and API keys, which require separate scrubbing passes. SecretScrubber uses ordered regular expressions to detect and mask credentials like database URLs, JWTs, AWS access keys, and PEM blocks, while preserving surrounding context such as hostnames needed for debugging. LiteralScrubber matches exact known values using safety rules including longest-match-first, minimum length enforcement, and skipping pure numeric strings to avoid false positives. The new RedactedStrategy replaces matched secrets with a fixed placeholder rather than a length-preserving mask, since preserving secret length is itself considered an information disclosure risk.