Laravel Structure Audit

Analyze a Laravel project's code organization against proven structuring principles. Scan all PHP source files (excluding vendor/, node_modules/, storage/) and produce a structured report of findings with actionable suggestions.

This is NOT a security audit. Focus exclusively on code structure, responsibility placement, and architectural patterns.

What to Check

1. Inline Validation in Controllers

Scan controller methods for $request->validate(...), Validator::make(...), or $this->validate(...) calls directly inside controller methods.

Why it matters: Inline validation is a normal Laravel pattern for small endpoints, but larger validation blocks become harder to reuse, test, and read when mixed into controllers. Form Request classes are often a better fit when validation grows in size or needs authorization, custom messages, or reuse.