PHP Static Analysis Tool - discover bugs in your code without running it!

Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.

Next-gen phpDoc parser with support for intersection types and generics

Symfony extension for PHPStan

phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code

Extra strict and opinionated rules for PHPStan

Doctrine extensions for PHPStan

PHPUnit extensions and rules for PHPStan

PHPStan rules for detecting usage of deprecated classes, methods, properties, constants and traits.

A static analysis tool for security

Dead code detection with tombstones for PHP 🪦🧟

Allows old code to use new standards

PHPStan extension for webmozart/assert

Nette Framework class reflection extension for PHPStan & framework-specific rules

PHPStan extension for Mockery

🤝 A friendly error formatter extension for PHPStan that provides more readable and informative output, including code snippets and color highlighting.

PHPStan extension for beberlei/assert

PHP Static Program Analysis

Static code analyzer for message flow in a prooph powered project

Code Climate Engine for PHP Code Sniffer