My name is Florent Morselli (flɔʁɑ̃ mɔʁseli). I am a French web developer and project manager passionate about PHP, ReactJS and Free, Libre & Open-Source Software. As far as possible, I contribute to projects or publish my own work.
🧡 Since early 2025, I am proud to be a
. This allows me to help shape the future of the framework I use and love daily.
The projects I am working on are mainly related to security over web applications. In particular, you will find useful libraries of Symfony bundles for
- One-Time Passwords (TOTP/HOTP) => see https://github.com/Spomky-Labs/otphp,
- Json Web Tokens (JWT, including signed and encrypted ones) => see https://github.com/web-token,
- Web Push => see https://github.com/Spomky-Labs/web-push,
- Concise Binary Object Representation (CBOR) => see https://github.com/Spomky-Labs/cbor-php,
- Webauthn => see https://github.com/web-auth.
Among all of these projects, let me encourage you to read more about Webauthn, a PHP implementation I am working on since end of 2018 and that will help you to get rid of passwords.
In addition, I had the opportunity to share my knowledge during the following events:
- September 2022: I presented the possibilities offered by this technology during the second edition of ApiPlatformCon in September 2022 in Lille, France.
- March 2023, I gave two 1-day workshops during the Symfony Live Paris 2023.
- December 2023, I gave a 1-day workshop during the Symfony Con Brussels 2023.
- March 2024, I presented my feedback on the Progressive Web Apps and gave a 1-day workshop during the Symfony Live 2024.
- March 2025, I gave a 1-day workshop during the Symfony Live 2025
Feel free to ask me about all of these FLOSS projects or reach me on any other topics you may want to discuss.
Hereafter an overview of my involvement in the Open-Source ecosystem. If you wish, you can sponsor me. The GitHub Sponsors page or the Patreon page are made for that purpose. Any help is greatly appreciated and allows me to spend time on these projects.
- Spomky-Labs/otphp - 🔐 A PHP library for generating one time passwords according to RFC 4226 (HOTP) and the RFC 6238 (TOTP) (1 day ago)
- Spomky-Labs/web-push-doc - (1 day ago)
- Spomky-Labs/web-push - This framework contains PHP libraries and Symfony bundle to allow developers to integrate web-push notifications into their web applications. (1 day ago)
- Spomky-Labs/phpqa - 🐘 Opinionated CI-ready PHP QA Docker image built on top of jakzal/phpqa, extended with Castor and custom CI tasks. (2 days ago)
- Spomky-Labs/phpwa-demo - Demonstration for the PHPWA Bundle (2 weeks ago)
- web-auth/webauthn-framework - FIDO-U2F / FIDO2 / Webauthn Framework (2 weeks ago)
- Spomky-Labs/pki-framework - Public Key Infrastructure (2 weeks ago)
- jakzal/toolbox - Helps to discover and install tools (2 weeks ago)
- mtarld/sfcon-apip - (2 weeks ago)
- Spomky-Labs/pwa-bundle - PHP library for generating a full featured PWA manifest (3 weeks ago)
- Merge 11.4.x into 11.5.x on Spomky-Labs/otphp (1 day ago)
- Document readonly classes migration from PR #244 on Spomky-Labs/otphp (1 day ago)
- Migrate CI/CD to .ci-tools structure with Castor orchestration on Spomky-Labs/web-push (2 days ago)
- feat: add custom exception hierarchy for better error handling on Spomky-Labs/otphp (2 days ago)
- Fix documentation and prepare for v11.4.0 release on Spomky-Labs/otphp (2 days ago)
- Allow passing a custom secret size when generating OTP on Spomky-Labs/otphp (2 days ago)
- Fix label validation to comply with Google Authenticator spec on Spomky-Labs/otphp (3 days ago)
- Accept OTP URIs with different issuer in label and parameter on Spomky-Labs/otphp (3 days ago)
- Enhance Dockerfile with new libraries and PIE usage on Spomky-Labs/phpqa (1 week ago)
- Refactor Dockerfile to use PIE for PHP extensions on Spomky-Labs/phpqa (1 week ago)
- Spomky-Labs/otphp (11.4.0, 2 days ago) - 🔐 A PHP library for generating one time passwords according to RFC 4226 (HOTP) and the RFC 6238 (TOTP)
- symfony/security-http (v8.0.3, 5 days ago) - Symfony Security Component - HTTP Integration
- symfony/security-core (v8.0.3, 5 days ago) - Symfony Security Component - Core Library
- symfony/mailer (v8.0.3, 5 days ago) - Helps sending emails
- symfony/framework-bundle (v8.0.3, 5 days ago) - Provides a tight integration between Symfony components and the Symfony full-stack framework
- symfony/symfony (v8.0.3, 5 days ago) - The Symfony PHP framework
- nelmio/NelmioSecurityBundle (v3.7.0, 6 days ago) - Adds extra security-related features in your Symfony application
- jakzal/toolbox (v1.104.2, 1 week ago) - Helps to discover and install tools
- web-auth/webauthn-framework (5.2.3, 2 weeks ago) - FIDO-U2F / FIDO2 / Webauthn Framework
- Spomky-Labs/pki-framework (1.4.1, 2 weeks ago) - Public Key Infrastructure
- drupal-spider (2 weeks ago)
- tacman (2 years ago)
- chalasr (3 years ago)
- passbolt (5 years ago)











