Download the PHP package happenv-com/laravel-true-modular-phpstan without Composer

PHPStan for Laravel True Modular

PHPStan extensions for laravel-true-modular modular monoliths. Ships two independent, zero-config extensions:

Requires PHP 8.3+, PHPStan 2.x and laravel-true-modular (Laravel 12/13). It reuses the framework's own module discovery, so it understands your modules out of the box — no PHPStan parameters to set.

Installation

The package is a phpstan-extension. If you use phpstan/extension-installer (recommended), both extensions are registered automatically — nothing else to do:

Make sure the plugin is allowed in your root composer.json:

Manual registration (without extension-installer)

Include the bundled config in your phpstan.neon:

Or cherry-pick a single extension:

Larastan recommended. The Dynamic Relation Resolver reflects your Eloquent models, so install larastan/larastan for accurate results. With extension-installer it is wired up automatically.

Zero configuration

Neither extension needs any parameters in phpstan.neon. The Module Boundary Enforcer discovers modules through laravel-true-modular's own ModuleRegistry, which means it automatically honours:

• the configured module composer type (Application::moduleComposerType(), default true-module), and
• the configured modules directory (Application::modulesDirectory(), default app-modules).

A "module" is any package under that directory whose composer.json declares the module type. Allowed cross-module dependencies are read straight from each module's composer.json require section — exactly the same source of truth the framework uses to order service providers at runtime. There is no vendor prefix or path to configure.

If no modules are found (e.g. the directory does not exist), both rules silently do nothing, so installing the package never breaks an unrelated build.

What it reports

Dynamic Relation Resolver

Once installed it automatically types any relation registered through Laravel's relation resolver, for example:

To-one relations (hasOne, belongsTo, morphOne, hasOneThrough) are typed as Related|null; to-many relations as Collection<int, Related>.

Module Boundary Enforcer

For every module the enforcer reads its composer.json and treats its require entries that resolve to other known modules as the allowed cross-module dependencies. A module may always reference its own classes and any class from a package that is not a module (vendor libraries, the host application, …).

Violations look like:

Both use statements and inline references (new, static calls, instanceof, extends/implements, catch, class constants) are checked.

Circular dependencies are reported once at the end of analysis:

Error identifiers

You can ignore findings by identifier in phpstan.neon:

Example phpstan.neon

That's the whole configuration — point PHPStan at your modules and run it.

Development

The test suite covers both extensions:

• Dynamic relations — boots an in-memory Eloquent connection, registers relations via Model::resolveRelationUsing(), and asserts the resolver exposes them with the correct method/property types.
• Module boundary — uses PHPStan's RuleTestCase against fixture modules under tests/Fixtures to assert allowed/disallowed cross-module references and circular dependency detection.

License

MIT