vimeo/psalm
Psalm is a static analysis tool for PHP that finds type errors, bugs, and unsafe code before runtime. It offers configurable strictness, baseline support, and CI integration to help teams catch issues early and improve code quality.
|
Package
|
Score
|
Description
|
Stars
|
Likes
|
Forks
|
Downloads
|
Issues
|
Score
|
Opportunity
|
License
|
Last Release
|
|
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| psalm/psalm-plugin-api | 0.87 | Psalm plugin API providing interfaces and helpers to build and integrate custom plugins with the Psalm static analysis tool, enabling extensions such as new checks, type providers, and project-specific analysis behavior. | 1 | 0 | 0 | 262K | 0 | 0.0 | 55.3 | — | — | |
| hectorj/safe-php-psalm-plugin | 0.86 | A Psalm plugin for thecodingmachine/safe that flags calls to PHP functions with safe replacements, helping you migrate to exception-throwing versions and catch unchecked return values during static analysis. Drop it into your existing Psalm config to enforce safer PHP in CI. | 9 | 9 | 3 | 13 | 0 | 0.1 | 5.0 | NOASSERTION | 4 years ago | |
| psalm/phar | 0.86 | Install Psalm as a standalone PHAR to avoid Composer dependency conflicts. psalm/phar lets you add Psalm to any project or CI environment without pulling in extra packages, keeping your dependency tree clean while still running Psalm reliably. | 26 | 27 | 4 | 96K | 9 | 6.7 | 51.2 | — | 5 years ago | |
| nunomaduro/yorn | 0.85 | Yorn is a small, focused Laravel package from Nuno Maduro (Pest, Larastan). Install it with Composer and it slots neatly into an existing app, with a clean API, no heavy configuration, and the framework-native feel his packages are known for. | 144 | 146 | 6 | 0 | 2 | 1.3 | — | MIT | — | |
| orklah/psalm-insane-comparison | 0.85 | Psalm plugin that flags “insane” string-to-number loose comparisons that change behavior in PHP 8 (RFC: Saner string to number comparisons). Helps you find risky == checks like non-empty string vs 0 before upgrading, and suggests safer typing/casts. | 34 | 35 | 4 | 9K | 0 | 4.3 | 33.5 | MIT | 1 year ago | |
| roave/infection-static-analysis-plugin | 0.85 | Runs Psalm static analysis on escaped mutants from Infection test runs, killing mutations that violate your program's type signatures. Improves mutation scores by removing false escapes. Acts as a drop-in replacement for vendor/bin/infection with an extra --psalm-config flag. Note: hacky and slower... | 131 | 132 | 21 | 28K | 9 | 24.2 | 39.1 | MIT | 5 months ago | |
| fp4php/psalm-toolkit | 0.85 | A toolkit of Psalm extensions and plugins for stricter, more accurate static analysis in PHP projects. Adds extra checks and type inference to catch bugs earlier, with configuration that fits into existing Psalm setups and CI pipelines. | 4 | — | 0 | — | 0 | 0.0 | — | MIT | 3 years ago |
|
| psalm/plugin-laravel | 0.85 | Laravel static analysis with built-in taint-based security scanning: traces user input from request to sink to catch SQL injection, XSS, shell injection, file traversal, SSRF, open redirects and timing-unsafe secret comparisons. Runs locally and in CI, no account or cloud upload. | 346 | 346 | 79 | 142K | 103 | 59.0 | 69.7 | MIT | 1 week ago | |
| phpyh/psalm-tester | 0.85 | Run Psalm assertions from .phpt files. Write phpt tests with --FILE-- and --EXPECT/EXPECTF-- for traces and errors, then execute them via a PHPUnit test suite using PsalmTester. Supports per-suite default Psalm args and per-test --ARGS-- overrides. | 2 | 2 | 1 | 955 | 1 | 0.4 | 34.6 | MIT | 2 years ago | |
| weirdan/doctrine-psalm-plugin | 0.85 | A Doctrine plugin for Psalm (v4/v5) that improves static analysis of Doctrine entities and repositories through better type inference. Install via Composer, then enable it with the psalm-plugin command. | 86 | 89 | 45 | 119K | 29 | 39.5 | 63.9 | — | 2 weeks ago | |
| alies-dev/psalm-tester | 0.85 | Run Psalm assertions and traces as phpt test files inside PHPUnit. Write --FILE--/--EXPECT-- fixtures, use EXPECTF for flexible matching, pass custom Psalm arguments globally or per test via --ARGS--, and skip tests conditionally with --SKIPIF--. | 1 | 1 | 0 | 11K | 3 | 20.0 | 60.4 | MIT | 1 month ago | |
| psalm/plugin-symfony | 0.85 | Psalm plugin for Symfony that improves static analysis by inferring container, parameter, console, Doctrine repository, Request, HeaderBag, and Messenger types, plus Symfony taint analysis and service/parameter naming checks. | 242 | 241 | 68 | 252K | 33 | 42.5 | 61.7 | MIT | 3 days ago | |
| php-standard-library/psalm-plugin | 0.84 | Psalm plugin for PHP Standard Library (PSL) that improves static analysis of PSL Type specifications. It gives Psalm precise inferred types for shapes and coerce results, such as exact array shapes instead of broad unions. Install with Composer as a dev dependency and enable via psalm-plugin. | 25 | 25 | 7 | 39K | 1 | 12.5 | 46.6 | MIT | 7 months ago | |
| phpmetrics/phpmetrics | 0.84 | PhpMetrics is a static analysis tool for PHP that computes metrics for projects and classes and generates beautiful, readable HTML reports. Install it via Composer, run the binary against any folder, and explore complexity, maintainability, and quality insights right in your browser. | 2,617 | 2,620 | 261 | 444K | 2 | 46.4 | 35.8 | MIT | 2 months ago | |
| boesing/psalm-plugin-stringf | 0.84 | A Psalm plugin that statically validates printf and sprintf format strings, checking that placeholders match the number and types of arguments passed. Mismatches are caught during analysis instead of at runtime, using Psalm's type inference to verify format specifiers across your codebase. | 12 | — | 2 | — | 6 | 2.7 | 5.3 | NOASSERTION | 3 years ago |
|
| phpstan/phpstan | 0.83 | PHPStan is a PHP static analysis tool that finds bugs in your code without running it. It catches whole classes of errors before tests are written, bringing compiled-language-style correctness checks to PHP projects. | 14,147 | 14,221 | 972 | 19M | 1,056 | 94.9 | 77.1 | MIT | 4 days ago | |
| wimg/php-compatibility | 0.83 | PHP_CodeSniffer ruleset that checks your code for compatibility with different PHP versions, helping you spot syntax and features that would break when upgrading or downgrading PHP. | 2,311 | 2,309 | 203 | 4K | 89 | 39.1 | 32.4 | LGPL-3.0 | 11 months ago | |
| weirdan/codeception-psalm-module | 0.83 | Codeception module that integrates Psalm static analysis into your test workflow. Run Psalm checks as part of Codeception suites to catch type issues and improve PHP code quality during CI and local testing. | 5 | 5 | 8 | 2K | 3 | 27.2 | 42.6 | MIT | 2 weeks ago | |
| maglnet/composer-require-checker | 0.83 | ComposerRequireChecker is a CLI tool that analyzes your composer.json and source code to find unknown symbols and soft/transitive dependencies. It flags code relying on packages or PHP extensions you haven't explicitly required, helping prevent unexpected breakage from dependency updates. | 1,011 | 1,019 | 80 | 667K | 32 | 36.0 | 57.4 | MIT | 7 months ago | |
| psalm/plugin-phpunit | 0.83 | A Psalm plugin for PHPUnit that improves static analysis of test suites by teaching Psalm about PHPUnit-specific APIs, assertions, and mocking. Install with Composer, enable via psalm-plugin, and get more accurate type checking in your tests. Requires Psalm v4 or later. | 78 | 79 | 38 | 368K | 21 | 37.2 | 67.2 | — | 2 weeks ago |
How can I help you explore Laravel packages today?