65 Laravel packages tagged “static analysis”
Most downloaded: larastan/larastan, with 83,043,524 downloads and 6,541 GitHub stars. Ranked by total downloads — use the controls below to sort by stars, most recently updated, or name.
larastan/larastan
Larastan - Discover bugs in your code without running it. A phpstan/phpstan extension for Laravel
6,541
83,043,524
shipmonk/dead-code-detector
Dead code detector to find unused PHP code via PHPStan extension. Can automatically remove dead PHP code. Supports libraries like Symfony, Doctrine, PHPUnit etc. Detects dead cycles. Can detect dead code that is tested.
530
6,830,227
staabm/phpstan-psr3
23
1,621,494
laraveldaily/filacheck
Static analysis for Filament projects - detect deprecated patterns and code issues
129
233,199
ivqonsanada/enlightn
Fork of Enlightn - Your performance & security consultant, an artisan command away.
1
87,150
heyosseus/sloppy
Static analysis for the debt AI coding agents leave behind, on any PHP project: 33 rules, architecture policies and module boundaries you describe, git-diff review, coverage-aware reading order, PHPStan baseline-growth detection, a Rector and Pint fix pass, Pest expectations, CI annotations, agent rulesets, Claude Code hooks and an MCP server. Runs inside PHPStan through the separate heyosseus/phpstan-sloppy extension. Extra rules and dashboards for Laravel. Deterministic, local, no LLM.
160
44,863
guanguans/monorepo-builder-worker
A set of additional release workers for symplify/monorepo-builder.
1
37,687
shieldci/laravel
Automated code analysis for Laravel applications with 73 open-source analyzers covering security, performance, reliability, code quality, and best practices. ShieldCI Pro adds 82 more (155 total).
2
34,566
script-development/phpstan-warroom-rules
Canonical PHPStan rules enforcing war-room doctrine across script-development Laravel territories.
32,562
imsuperlative/larastan-filament-macro
PHPStan extension for Filament's Macroable trait — runtime macro method resolution via Larastan.
5
22,923
pekral/phpcs-rules
Custom ruleset for PHP_CodeSniffer (PHPCS) with additional rules and configuration, based on Slevomat Coding Standard. Helps to enforce consistent code style and best practices in PHP projects.
16,846
kafkiansky/better-laravel
A set of rules for the Psalm static analysis tool that help to detect popular issues when working with the Laravel framework.
1
14,793
calebdw/phpstan-laravel
A PHPStan extension for analysis of Laravel applications and packages.
33
13,650
guanguans/php-cs-fixer-custom-fixers
Use php-cs-fixer to format bats,blade.php,Dockerfile,env,json,md,mdx,sh,sql,tex,text,toml,txt,xml,yaml...files. - 使用 php-cs-fixer 去格式化 bats、blade.php、Dockerfile、env、json、md、mdx、sh、sql、tex、text、toml、txt、xml、yaml...文件。
4
11,810
guanguans/rector-rules
A set of additional rules for rector/rector. - 一套针对 `rector/rector` 的附加规则。
1
10,865
guanguans/phpstan-rules
A set of additional rules for phpstan/phpstan. - 一套针对 `phpstan/phpstan` 的附加规则。
1
9,425
mfn/phpstan-lost-in-translation
Helps find missing translation strings in Laravel applications
1
7,834
pushery/sqlens-for-laravel
SQLens — database safety toolkit for Laravel. It lints pending migrations for lock and downtime risk and audits the live schema, on PostgreSQL and MySQL.
11
6,053
laramint/laravel-security-scanner
Laravel-aware security rules for php-security-scanner. Detects Laravel SQL injection (DB::raw, whereRaw), mass assignment, debug/dd leaks, unsafe validators, CSRF bypass, insecure cookies, env exposure, Blade raw echo, open redirect, Http SSRF, Storage/File path traversal, file-upload validation gaps, Auth/Crypt/Artisan/Process/Config injection, view-name injection, session fixation, and Mail header injection.
3
4,931
jaydeep/laravel-preflight
Artisan command that scans your Laravel codebase for breaking changes and compatibility issues before you upgrade to Laravel 9, 10, 11, 12, or 13.
5
4,308
jaydeep/laravel-guarddog
Laravel GuardDog — Scan your Laravel project for common security vulnerabilities and generate beautiful HTML reports.
7
4,122
happenv-com/laravel-true-modular-phpstan
PHPStan extensions for laravel-true-modular: dynamic Eloquent relation resolution and module boundary enforcement.
3,353
odinns/phpstan-pest-this
PHPStan extensions to infer Pest closure $this type from test file mappings.
1
3,129
sajjadhossainshohag/laravel-artican
Code Health Checker for Laravel — catch broken routes, missing views, schema mismatches, and runtime errors before deployment.
16
1,880
artflow-studio/laravel-security
Laravel package that scans applications (including Livewire) for security vulnerabilities, reports issues with severity levels, and provides remediation guidance and optional automated fixes.
963
mohamed-ashraf-elsaed/claude-kit
One command sets up Claude Code (and any AI coding agent) on a Laravel project: engineering rules, a quality gate (PHPStan, Pint, Pest), skills, git hooks, and stack-aware frontend tooling.
3
262
ianrodrigues/pest-plugin-code-quality
Method-level and class-level maintainability limits (complexity, body lines, parameters, methods, properties, inheritance depth) as Pest architecture expectations, with baselines for gradual adoption.
4
205
amarucci/phpstan-laravel-deadcode
Teaches PHPStan's dead code detector to read the wiring Laravel calls and PHP cannot see: Livewire components and their Blade templates, Eloquent enum casts, gate abilities, and package contracts.
235
prettyyellowdog/lumenstan
Lumenstan - Discover bugs in your code without running it. A phpstan/phpstan wrapper for Lumen based on Larastan
184
alies-dev/psalm-plugin-pest
Psalm plugin for Pest: types $this in test closures as the configured TestCase (with its traits and beforeEach() properties), resolves expectation and higher-order test chains, narrows types after expect() and accepts Pest's public API.
2
169
hosmelq/php-coding-standard
Opinionated ECS, Rector, and PHPStan presets for PHP and Laravel packages and applications.
81
seizonio/laravel-php-code-analysis-hook
A GIT pre-commit hook for running php code sniffer, php mess detector and phpunit before a commit can be accepted.
2
74
octane-doctor/octane-doctor
Octane readiness scanner for Laravel: detect long-lived worker risks, explain each finding, and gate CI on new ones.
1
39
goktugcy/worker-safety
Static analysis for PHP applications running on persistent workers. Detect cross-request state risks before they reach production.
1
17
heyjordanparker/mago-pest
Mago analyzer support for Pest: $this in test closures, dynamic test properties, and expectation chains.
12
tyhpdef/illuminate-collections-impl
Implementation package for tyhpdef/illuminate-collections. Require tyhpdef/illuminate-collections, not this package.
8
tyhpdef/illuminate-contracts-impl
Implementation package for tyhpdef/illuminate-contracts. Require tyhpdef/illuminate-contracts, not this package.
8