psalm/plugin-laravel
Psalm plugin for Laravel that adds deep framework-aware static analysis plus taint-based security scanning. Detects SQL injection, XSS, SSRF, shell injection, file traversal, and open redirects by tracking user input flows across functions and services.
To debug plugin code with Xdebug and PhpStorm:
XDEBUG_MODE=debug XDEBUG_SESSION=1 PSALM_ALLOW_XDEBUG=1 vendor/bin/psalm --threads=1 --no-cache
--threads=1 is required so Psalm runs in a single process (breakpoints don't work in forked workers).
PSALM_ALLOW_XDEBUG=1 prevents Psalm from restarting itself without Xdebug (it does this by default for performance).
How can I help you explore Laravel packages today?