A starter kit read and not adopted

Laravel 12 moves its starter kits out of the framework, which made them worth reading as a reference rather than as a dependency.

what the kit provides:
  registration, login, password reset, email
  verification, two-factor, a settings page, and a
  frontend stack decision

what we have:
  all of the above, written between 2018 and 2021,
  with our own two-factor flow and no frontend stack

what reading it changed:
  our password reset did not invalidate other sessions.
  theirs does. one commit.

A starter kit is for starting and an eight-year-old application is not the audience, which does not make it useless — reading somebody else’s complete implementation of a thing you wrote piecemeal is the cheapest audit available. One genuine finding from an hour is a good rate.