psalm/plugin-laravel
Laravel Psalm plugin for deep static analysis plus taint-based security scanning. Detects SQL injection, XSS, SSRF, shell injection, path traversal, and open redirects by tracking user input through Laravel code without running it.
To debug plugin code with Xdebug and PhpStorm:
XDEBUG_MODE=debug XDEBUG_SESSION=1 PSALM_ALLOW_XDEBUG=1 vendor/bin/psalm --threads=1 --no-cache
--threads=1 is required so Psalm runs in a single process (breakpoints don't work in forked workers).
PSALM_ALLOW_XDEBUG=1 prevents Psalm from restarting itself without Xdebug (it does this by default for performance).
How can I help you explore Laravel packages today?