Put this code in .htaccess to hide from access
<Files ~ "\.(git|env|json|config.js|md|gitignore|gitattributes|lock|example)$">
<Files ~ "\.(git|env|json|config.js|md|gitignore|gitattributes|lock|example)$">
Order allow,deny
Deny from all
</Files>
<Files ~ "(artisan)$">
Order allow,deny
Deny from all
</Files>