Weave Code
Code Weaver
Helps Laravel developers discover, compare, and choose open-source packages. See popularity, security, maintainers, and scores at a glance to make better decisions.
Feedback
Share your thoughts, report bugs, or suggest improvements.
Subject
Message

Plugin Laravel Laravel Package

psalm/plugin-laravel

Laravel Psalm plugin for deep static analysis plus taint-based security scanning. Detects SQL injection, XSS, SSRF, shell injection, path traversal, and open redirects by tracking user input through Laravel code without running it.

View on GitHub
Deep Wiki
Context7

title: Custom Issues nav_order: 4 has_children: true

Custom Issues

The plugin ships advanced Laravel-aware static analysis checks that extend Psalm's built-in diagnostics:

  • NoEnvOutsideConfigenv() called outside the application's config directory
  • InvalidConsoleArgumentNameargument() references undefined console command argument
  • InvalidConsoleOptionNameoption() references undefined console command option
  • MissingViewview() references a non-existent Blade template (opt-in)
  • MissingTranslation__() or trans() references an undefined translation key (opt-in)
  • ModelMakeDiscouragedModel::make() used instead of new Model()
  • OctaneIncompatibleBindingsingleton() closure resolves a request-scoped service such as Request, Session, or Auth (auto-enabled when laravel/octane is installed)
  • PublicModelScopepublic #[Scope] Eloquent query scope, whose static call is a runtime fatal (reported at error levels 1 to 4)
  • PublicModelAccessorpublic legacy getXxxAttribute() / setXxxAttribute() accessor or mutator, a pure convention nit (reported at error level 1)
  • ImplicitQueryBuilderCall — a query builder or local scope method called directly on a model instead of through an explicit query() entry point (opt-in)

Each issue page explains what it detects, why it matters, and how to fix it.

Weaver

How can I help you explore Laravel packages today?

Conversation history is not saved when not logged in.
Prompt
Add packages to context
No packages found.
nexmo/api-specification
capell-app/block-library
axium/identity
cetria/laravel-dummy-models
cetria/reflection-helper
agropredict/sso-auth-bundle
evolvestudio/spam-protection
datacore/hub-sdk
develia/commons
cuci/prototurk-sdk
cuci/prototurk-sdk-symfony
develia/geo-bundle
dreamzy/livewire-charts
touchestate-sdk/php-sdk
22h/doctrine-garbage-collection-bundle
agtp/agtp-php
agtp/mod-php
splash/sonata-admin
splash/metadata
splash/openapi