Laravel Static Analysis Packages

larastan/larastan

Larastan - Discover bugs in your code without running it. A phpstan/phpstan extension for Laravel

6,531 75,481,795

Dead code detector to find unused PHP code via PHPStan extension. Can automatically remove dead PHP code. Supports libraries like Symfony, Doctrine, PHPUnit etc. Detects dead cycles. Can detect dead code that is tested.

520 6,029,115

staabm/phpstan-psr3

23 1,444,802

calebdw/larastan-livewire

A Larastan / PHPStan extension for Livewire.

61 986,558

tomasvotruba/bladestan

PHPStan rule for static analysis of Blade templates

377 933,388

laraveldaily/filacheck

Static analysis for Filament projects - detect deprecated patterns and code issues

129 196,580

ivqonsanada/enlightn

Fork of Enlightn - Your performance & security consultant, an artisan command away.

1 79,614

guanguans/monorepo-builder-worker

A set of additional release workers for symplify/monorepo-builder.

1 35,867

shieldci/laravel

Automated code analysis for Laravel applications covering security, performance, reliability, code quality and best practices.

2 32,973

cline/analyzer

Configurable parallel PHP code analyzer for checking class references

24,801

exin/enlightn

Fork of Enlightn with Laravel 12 support

21,446

imsuperlative/larastan-filament-macro

PHPStan extension for Filament's Macroable trait — runtime macro method resolution via Larastan.

5 19,105

kafkiansky/better-laravel

A set of rules for the Psalm static analysis tool that help to detect popular issues when working with the Laravel framework.

1 14,696

heyosseus/sloppy

Static analysis for the debt AI coding agents leave behind, on any PHP project: 26 rules, architecture policies and module boundaries you describe, git-diff review, coverage-aware reading order, PHPStan baseline-growth detection, a Rector and Pint fix pass, Pest expectations, CI annotations, agent rulesets, Claude Code hooks and an MCP server. Runs inside PHPStan through the separate heyosseus/phpstan-sloppy extension. Extra rules and dashboards for Laravel. Deterministic, local, no LLM.

121 11,222

jbboehr/phpstan-laravel-validation

Laravel Validation extension for PHPStan

9 10,053

guanguans/php-cs-fixer-custom-fixers

Use php-cs-fixer to format bats,blade.php,Dockerfile,env,json,md,mdx,sh,sql,tex,text,toml,txt,xml,yaml...files. - 使用 php-cs-fixer 去格式化 bats、blade.php、Dockerfile、env、json、md、mdx、sh、sql、tex、text、toml、txt、xml、yaml...文件。

4 9,990

guanguans/rector-rules

A set of additional rules for rector/rector. - 一套针对 `rector/rector` 的附加规则。

1 9,231

guanguans/laravel-soar

SQL optimizer and rewriter for laravel. - laravel 的 SQL 优化器和重写器。

222 8,849

guanguans/phpstan-rules

A set of additional rules for phpstan/phpstan. - 一套针对 `phpstan/phpstan` 的附加规则。

1 7,820

mfn/phpstan-lost-in-translation

Helps find missing translation strings in Laravel applications

1 6,652

calebdw/phpstan-laravel

A PHPStan extension for analysis of Laravel applications and packages.

33 6,036

laramint/laravel-security-scanner

Laravel-aware security rules for php-security-scanner. Detects Laravel SQL injection (DB::raw, whereRaw), mass assignment, debug/dd leaks, unsafe validators, CSRF bypass, insecure cookies, env exposure, Blade raw echo, open redirect, Http SSRF, Storage/File path traversal, file-upload validation gaps, Auth/Crypt/Artisan/Process/Config injection, view-name injection, session fixation, and Mail header injection.

3 4,708

adrum/inertia-phpstan

PHPStan extension to validate Inertia.js page existence on disk

8 3,990

pushery/sqlens-for-laravel

SQLens — database safety toolkit for Laravel. It lints pending migrations for lock and downtime risk and audits the live schema, on PostgreSQL and MySQL.

9 3,673

jaydeep/laravel-guarddog

Laravel GuardDog — Scan your Laravel project for common security vulnerabilities and generate beautiful HTML reports.

7 3,582

jaydeep/laravel-preflight

Artisan command that scans your Laravel codebase for breaking changes and compatibility issues before you upgrade to Laravel 9, 10, 11, 12, or 13.

5 3,192

odinns/phpstan-pest-this

PHPStan extensions to infer Pest closure $this type from test file mappings.

1 2,838

bnomei/scip-laravel

Laravel-aware SCIP index generation for Laravel applications.

2,009

laramago/laramago

Laravel compatibility preset and runner for Mago static analysis.

19 1,615

baspa/larascan

A security-focused static analysis package for Laravel applications

6 1,236

sajjadhossainshohag/laravel-artican

Code Health Checker for Laravel — catch broken routes, missing views, schema mismatches, and runtime errors before deployment.

15 1,033

artflow-studio/laravel-security

Laravel package that scans applications (including Livewire) for security vulnerabilities, reports issues with severity levels, and provides remediation guidance and optional automated fixes.

939

mohamed-ashraf-elsaed/claude-kit

One command sets up Claude Code (and any AI coding agent) on a Laravel project: engineering rules, a quality gate (PHPStan, Pint, Pest), skills, git hooks, and stack-aware frontend tooling.

3 256

ianrodrigues/pest-plugin-code-quality

Method-level and class-level maintainability limits (complexity, body lines, parameters, methods, properties, inheritance depth) as Pest architecture expectations, with baselines for gradual adoption.

4 197

prettyyellowdog/lumenstan

Lumenstan - Discover bugs in your code without running it. A phpstan/phpstan wrapper for Lumen based on Larastan

184

amarucci/phpstan-laravel-deadcode

Teaches PHPStan's dead code detector to read the wiring Laravel calls and PHP cannot see: Livewire components and their Blade templates, Eloquent enum casts, gate abilities, and package contracts.

89

seizonio/laravel-php-code-analysis-hook

A GIT pre-commit hook for running php code sniffer, php mess detector and phpunit before a commit can be accepted.

2 74

octane-doctor/octane-doctor

Octane readiness scanner for Laravel: detect long-lived worker risks, explain each finding, and gate CI on new ones.

1 39

goktugcy/worker-safety

Static analysis for PHP applications running on persistent workers. Detect cross-request state risks before they reach production.

12

jakehenshall/pest-plugin-wordpress

The most comprehensive WordPress testing framework built on Pest PHP v4. Includes PHPStan v2.1 for static analysis, SQLite for fast testing, and 150+ helper functions. Test WordPress plugins and themes with Laravel-style syntax. Browser testing, HTTP testing, email mocking, AJAX testing, REST API helpers, test sharding, time travel, and more. Zero configuration required.

1 6

52 Laravel packages tagged “static analysis”