PHPStan
PHPStan project (Ondrej Mirtes and contributors)
Static analyzer for PHP that infers types and reports code that cannot work, configurable through escalating strictness levels.
SAST
Analyze source code or bytecode for vulnerable patterns without running the application.
31 tools profiled
How it differs Reads the code you wrote without running it. SCA checks the third party packages you depend on; IAST watches the running app while your tests exercise it.
PHPStan project (Ondrej Mirtes and contributors)
Static analyzer for PHP that infers types and reports code that cannot work, configurable through escalating strictness levels.
PHPStan project (Ondrej Mirtes and contributors)
Static analyzer for PHP that infers types and reports code that cannot work, configurable through escalating strictness levels.