nikic/php-fuzzer
A coverage-guided fuzzing tool for PHP that helps uncover crashes, assertion failures, and security bugs in PHP itself and extensions. Uses AFL-style instrumentation and supports running targets under various sanitizers for fast, automated bug hunting.
|
Package
|
Score
|
Description
|
Stars
|
Likes
|
Forks
|
Downloads
|
Issues
|
Score
|
Opportunity
|
License
|
Last Release
|
|
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| php-parallel-lint/php-console-highlighter | 0.83 | Highlight PHP source code in the terminal with readable, colorized syntax. php-console-highlighter works with ConsoleColor and can highlight whole files or snippets—ideal for CLI tools, linters, and test output to quickly spot errors and context. | 86 | 86 | 6 | 1M | 0 | 1.7 | 56.4 | MIT | 4 years ago | |
| phploc/phploc | 0.83 | phploc is a command-line tool for quickly measuring the size of a PHP project, reporting LOC/NCLOC/CLOC, LLOC, and counts of classes, traits, methods, functions, and cyclomatic complexity. Archived: no longer maintained. | 2,336 | 2,378 | 164 | 122K | 0 | 8.3 | 16.8 | BSD-3-Clause | — | |
| henrikbjorn/phpspec-code-coverage | 0.83 | Deprecated PhpSpec extension that generates code coverage reports (HTML by default, plus clover/php/text) with configurable whitelists/blacklists and output paths. Install via Composer, enable in phpspec.yml, run phpspec (or phpdbg on PHP 7+). | 97 | 100 | 28 | 2K | 0 | 2.2 | 12.3 | MIT | 10 years ago | |
| satooshi/php-coveralls | 0.83 | PHP client for Coveralls: uploads PHPUnit clover coverage reports from CI (GitHub Actions, Travis, CircleCI, Jenkins, Codeship) to coveralls.io. Install via Composer or use the provided phar. Supports PHP 7.4+ (2.9+) and older versions via 1.x/2.x. | 514 | 464 | 123 | 37K | 7 | 19.1 | 30.5 | MIT | 10 months ago | |
| liip/rmt | 0.83 | RMT is a release management tool for PHP projects. Configure versioning (e.g., semantic), where versions are stored (tags, changelog), and automated pre/post-release actions. Install via Composer (dev or global) or as a Phar, then run releases consistently. | 458 | 462 | 45 | 4K | 16 | 9.0 | 20.9 | MIT | — | |
| moxio/php-codesniffer-sniffs | 0.82 | Custom PHP_CodeSniffer 3.x sniffs from Moxio to catch subtle PHP bugs and unexpected behavior. Provides a standalone ruleset or individual sniffs for other standards, enforcing safer comparisons, strict base64_decode, switch continue rules, and more. | 17 | 18 | 11 | 3K | 0 | 16.6 | 33.4 | MIT | 9 months ago | |
| spiral/debug | 0.82 | Spiral Debug adds a lightweight debugging toolkit for Spiral/PHP apps. Capture and inspect errors, exceptions, logs, and runtime details during development, with simple integration and minimal overhead for troubleshooting and diagnostics. | 2 | 2 | 1 | 5K | 0 | 4.2 | 44.8 | MIT | 6 years ago | |
| theseer/tokenizer | 0.82 | A PHP tokenizer library for parsing PHP source code into tokens, built on top of ext/tokenizer. Used by tools like PHPUnit to analyze code, inspect syntax, and support static analysis, refactoring, and code quality workflows. | 5,192 | 5,205 | 25 | 14M | 0 | 30.8 | 48.4 | NOASSERTION | 10 months ago | |
| graham-campbell/analyzer | 0.82 | Analyzer is a PHP package by Graham Campbell that checks whether referenced classes actually exist. It helps catch missing or mistyped class references, supports PHP 8.1-8.5, and integrates with PHPUnit 10-13 for test-time analysis. | 0 | 32 | — | 8K | — | 9.3 | 53.7 | — | — | |
| friends-of-phpspec/phpspec-code-coverage | 0.82 | PhpSpec extension that generates code coverage reports (console and HTML) for your specs. Works with Xdebug, phpdbg or pcov and supports multiple PhpSpec/PHP versions, helping you see which parts of your codebase are exercised by tests. | 20 | 21 | 14 | 23K | 4 | 7.9 | 44.1 | NOASSERTION | 1 year ago | |
| php-collective/code-sniffer | 0.82 | A PHP_CodeSniffer ruleset that follows PSR-2 and PSR-12 with many extra fixers on top, plus a stricter PhpCollectiveStrict standard. Install via Composer, add it to phpcs.xml, and run phpcs/phpcbf or composer scripts to check and auto-fix code style. | 7 | 7 | 1 | 72K | 0 | 32.1 | 64.0 | MIT | 1 week ago | |
| kahlan/kahlan | 0.82 | Kahlan is a full-featured PHP unit and BDD test framework with an RSpec-style describe-it syntax. It offers built-in stubbing and monkey patching without PECL extensions, plus code coverage and multiple reporters. | 1,146 | 1,150 | 70 | 24K | 7 | 32.8 | 24.2 | MIT | 3 weeks ago | |
| padraic/phar-updater | 0.82 | Update PHAR applications securely and easily. phar-updater checks remote manifests, verifies version updates, and downloads new PHAR files with optional signature validation, helping CLI tools and self-contained PHP apps ship safe auto-updates. | 366 | 361 | 28 | 22K | 15 | 4.9 | 22.2 | BSD-3-Clause | 8 years ago | |
| php-parallel-lint/php-var-dump-check | 0.82 | CI-friendly tool that scans your PHP code for leftover debugging statements like var_dump(), print_r(), die()/dd() and similar. Helps keep accidental dumps out of production by failing builds when debug output is found. | 22 | 22 | 11 | 43K | 5 | 2.7 | 47.3 | NOASSERTION | 6 years ago | |
| nikic/include-interceptor | 0.81 | PHP extension and library to intercept and virtualize include/require. Lets you provide custom file contents, rewrite paths, or instrument included code without touching the filesystem—useful for loaders, build tools, testing, and sandboxing. | 70 | 70 | 3 | 164K | 1 | 1.4 | 46.4 | — | 4 years ago | |
| pdepend/pdepend | 0.81 | PHP Depend (PDepend) is a static analysis tool for PHP that measures software metrics and detects design issues. It generates reports (XML, HTML, etc.) to help spot complexity, coupling, and code structure problems for better maintainability. | 962 | 984 | 141 | 3M | 10 | 38.0 | 58.0 | BSD-3-Clause | 1 month ago | |
| grifart/phpstan-oneline | 0.81 | A PHPStan extension that formats each reported error on a single line, making analysis output easier to read, search, and parse in CI logs or terminals. Useful for grep-friendly error reports and cleaner build output. | 24 | — | 5 | — | 1 | 0.5 | — | MIT | 1 year ago |
|
| microsoft/tolerant-php-parser | 0.81 | Tolerant PHP parser from Microsoft that builds an AST even from incomplete or syntactically invalid code. Ideal for IDEs, refactoring tools, and static analysis, with error recovery and precise source positions for tokens and nodes. | 895 | 896 | 84 | 204K | 54 | 23.3 | 52.3 | MIT | — | |
| php-webdriver/webdriver | 0.81 | PHP bindings for Selenium WebDriver. Drive real browsers from PHP via W3C WebDriver (and legacy JsonWireProtocol), compatible with Selenium 2–4. Install via Composer and connect to Selenium Server or other remote ends for automation/testing. | 5,194 | 5,231 | 840 | 3M | 23 | 47.9 | 48.6 | MIT | — | |
| jonpurvis/fuzz | 0.81 | Fuzz is a Laravel package for fuzz testing your application. It sends randomized requests and payloads to your routes, helping uncover unhandled exceptions and 500 errors before they reach production. | 20 | — | 0 | — | 0 | 18.7 | — | MIT | 1 month ago |
How can I help you explore Laravel packages today?