Libraries tagged by static-analysis

Fast static analyzer for PHP

Go to Download

PHPCS ruleset and custom sniffs enforcing the clean-code standards defined at mikebronner.dev/clean-code.

Go to Download

Contact Form 7 function and class declaration stubs for static analysis

Go to Download

PHP stubs for Moodle LMS — classes, functions, constants, and global variables for IDE and static analysis support

Go to Download

Rust-style Result and Option types for PHP

Go to Download

Helps find missing translation strings in Laravel applications

Go to Download

Shared coding standard, static-analysis, test and CI configuration for the magicsunday/* projects.

Go to Download

Framework-agnostic static security scanner for PHP. Detects SQLi, XSS, command injection, path traversal, insecure deserialization, weak crypto, hardcoded secrets, and more.

Go to Download

Laravel-aware security rules for php-security-scanner. Detects Laravel SQL injection (DB::raw, whereRaw), mass assignment, debug/dd leaks, unsafe validators, CSRF bypass, insecure cookies, env exposure, Blade raw echo, open redirect, Http SSRF, Storage/File path traversal, file-upload validation gaps, Auth/Crypt/Artisan/Process/Config injection, view-name injection, session fixation, and Mail header injection.

Go to Download

PHPStan rules shared across KnpLabs organization projects

Go to Download

Cucumber Linter - Static analysis tool for Cucumber and Behat

Go to Download

Stubs for the Advanced Custom Fields Pro WordPress plugin, used for static analysis.

Go to Download

A PHPStan extension to enforce NASA's Power of Ten rules.

Go to Download

Psalm plugin for Laravel Nova

Go to Download

PHPStan extensions for laravel-true-modular: dynamic Eloquent relation resolution and module boundary enforcement.

Go to Download