Libraries tagged by code analysis

🎯 Standardized PHP code quality configurations for PHP-CS-Fixer, PHPStan, Rector, and PHPCPD. Share consistent coding standards across all your projects.

Go to Download

Static analyzer that detects tramp data: parameters passed through chains of PHP methods that never use them.

Go to Download

🌳 PhpSyntax: a lossless concrete syntax tree (CST) for PHP. Every token, space and comment is in the tree and printing it gives the file back byte for byte, so a tool changes only what it touches. Comes with a mutation API for refactoring, formatters and code generation.

Go to Download

Curated Rector rule set for PHP 8.4+ — 228 hand-picked rules in one import.

Go to Download

Custom ruleset for PHP_CodeSniffer (PHPCS) with additional rules and configuration, based on Slevomat Coding Standard. Helps to enforce consistent code style and best practices in PHP projects.

Go to Download

Dependency-free Laravel static analysis scanner with auto-fix, baseline, and SARIF output. Composer + Claude Code skill.

Go to Download

Framework-agnostic PHP library for automatically fixing PHPStan errors using static analysis

Go to Download

Taint is a PHP extension for detecting XSS codes (tainted strings).

Go to Download

PHPStan and Larastan type inference for Docuccino: infers response and exception shapes from the real types in your code.

Go to Download

Configurable parallel PHP code analyzer for checking class references

Go to Download

PHPStan extension for detecting parameters that should use SensitiveParameter

Go to Download

Laravel-aware SCIP index generation for Laravel applications.

Go to Download

Detect and report dead / unused code in Laravel applications.

Go to Download

Opinionated Rector rules for PHP — strict-assertion enforcement, no @phpstan-ignore, no env-checks in src, no superglobals, PSR Clock requirement, no direct DB / event-dispatch / assert() inside functional tests, and a comment-stripper that keeps only PHPStan tag blocks.

Go to Download

Code Health Checker for Laravel — catch broken routes, missing views, schema mismatches, and runtime errors before deployment.

Go to Download