Whim lets classes and interfaces list the types allowed to inherit from them using a `for` clause. This post looks at what sealed families actually restrict, why direct children matter, how Whim enfor...

Creating solutions for nonexistent problems.

Creating solutions for nonexistent problems.

Creating solutions for nonexistent problems.

Mago 1.48.0 Mago 1.48.0 ships MANA 1.1 with richer analyzer hooks, sharper type inference, safer formatting, and tighter PHP checks. ✨ Features Analyzer array_pad shapes: infers exact list shapes ...

Mago 1.47.6 Mago 1.47.6 strengthens property and control-flow narrowing, preserves collection precision, and fixes formatter comment and string handling. 🐛 Bug Fixes Analyzer Nested isset: marks r...

Mago 1.47.5 Mago 1.47.5 improves conditional and nullsafe narrowing, class-string handling, constructor analysis, and wide-shape performance. 🐛 Bug Fixes Analyzer Suppressed guards: narrows types ...

Mago 1.47.2 Mago 1.47.2 prevents invalid UTF-8 reporting crashes, preserves formatter semantics, and fixes several analyzer false positives. 🐛 Bug Fixes Analyzer Static class-string calls: preserv...

Extend Mago with external linter rules and analyzer plugins.

Mago 1.47.0 Extensions in any language, fully funded by CHECK24 Thanks to CHECK24 (@check24-opensource) for fully funding Mago's new Extension API and PHP SDK. ✨ Features Extensions Extension API:...

Sponsored by check24 ❤️ More details soon :) closes #848 closes #2164 closes #1663 closes #39

### Summary Mago's GitHub Actions reporting format (`--reporting-format=github`) wrote analyzed file paths and issue text into GitHub workflow commands without escaping them. A file path contain...

Mago 1.46.0 This release fixes a workflow-command injection in the GitHub reporting format (GHSA-f256-xqf4-x8pr), adds a redundant-static linter rule and a --stats shorthand, corrects a batch of ge...

Mago 1.45.0 This release teaches the analyzer to build keyed array shapes from get_object_vars(), adds @param-closure-this support and an auto-fix for overly-wide return types, introduces a linter ...

Mago 1.44.0 A faster release with stronger dependent-type analysis, richer guard and linter configuration, and fixes across the CLI, formatter, analyzer, and semantics. ✨ Features Analyzer Overrid...

CEL-PHP 2.0.0 cel-php 2.0 is a major release that aligns the evaluator with the CEL specification and cel-go. Highlights: numeric comparisons and null equality (proposal 210), optional values (prop...

ext-typst 0.2.0 A packaging and reliability release: musl binaries now build and ship, pie install resolves on arm64 Linux, the extension registers as typst, and the IDE stubs are installable strai...

Mago 1.43.0 A fix-focused release clearing false positives across the analyzer, codex, linter, and formatter. is_callable narrowing, strict in_array, type-alias recursion, ::class array keys, no-de...

Mago 1.40.0 A big release driven by community reports: three new formatter settings, a new suspicious-explode-arguments linter rule and a final-controller auto-fix, an inspect-baseline CLI command,...

## Impact `Psl\H2\ServerConnection` does not validate that the total bytes received in DATA frames match the `content-length` header declared in the HEADERS frame, in violation of RFC 9113 §8.1....

PSL 6.2.0 A massive release — three new networking stack components (HTTP, SMTP, DNS), the EitherOrBoth type with full-outer-join iterators, a major IO toolkit expansion, and broad covariance impro...

Mago 1.29.0 A maintenance release with two themes: tightening generic template inference (the #1859 false-positive cluster) and giving closures + anonymous classes stable, human-readable names. New...

氧化版 PHP 工具链。一款用 Rust 编写的静态分析器、linter 和格式化器。

La chaîne d'outils PHP oxydée. Un analyseur statique, un linter et un formateur écrits en Rust.

The oxidized PHP toolchain. A static analyzer, linter, and formatter written in Rust.

Mago 1.25.1 This release is a bug-fix pass focused on the linter and analyzer, plus a full rewrite of the documentation site. Several false positives reported against 1.25.1 are fixed (no-redundant...

Mago 1.25.0 Mago 1.25.0 is a big release. Seven new linter rules (no-dead-store, no-redundant-variable, no-redundant-else, no-negated-ternary, no-unused-static, no-unused-global, no-unused-closure-...

Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code. - carthage-software/mago

Mago 1.24.0 Mago 1.24.0 is mostly an analyzer-correctness release: recursive literal-scalar widening in by-reference out-types, wider mixed-operand detection on templated concatenations, and target...

Mago 1.20.0 Mago 1.20.0 is a big release focused on analysis accuracy, speed, and diagnostics. Highlights include new new<X> and template-type<Object, ClassName, TemplateName> utility types, detect...

Mago 1.18.0 Mago 1.18.0 is a packed release with 5 new features, 17 bug fixes across all tools, and improvements to the docblock parser. Highlights include full callable-string type support with fu...

Mago 1.16.0 Mago 1.16.0 is a significant release focused on analyzer accuracy. This release fixes over 20 false positives across loop analysis, type narrowing, integer range tracking, switch fall-t...

PSL 6.1.0 In PSL 5.x, we focused on the foundational networking stack-TCP, TLS, Unix sockets, UDP, and connection pooling. It was all about getting the low-level plumbing right. With the 6.x series...

A consistent, centralized, well-typed set of APIs for PHP covering async, collections, networking, I/O, cryptography, terminal UI, and more.

PSL 6.0.0 PSL 6.0 is the biggest release in the project's history. New home, new packages, new capabilities. A new home PSL has moved. The repository, the organization, the website - everything has...

PSL - Crown 5.0 PSL 5.0 - nicknamed Crown - is the biggest release of the PHP Standard Library to date, introducing 10 new components, a complete networking stack rewrite, and significant performan...

Senior Engineer building the next generation of PHP tooling in Rust. Creator of Mago & the PHP Standard Library (PSL). Your sponsorship directly supports my full-time open source work.

Software engineers who get things done.. We build and maintain open source tools that developers actually use. Linters, static analyzers, and libraries that make PHP development faster and safer.

Mago 1.9.0 This release brings PHP 8.5 deprecation detection, new return type providers for sprintf() and array_map(), generator type inference, several new formatter options, and a large number of...

Mago 1.6.0 This release brings new analyzer checks for class design enforcement, new linter rules for file organization, path-scoped ignore/exclusion support, formatter fixes, and numerous bug fixe...

Senior Engineer building the next generation of PHP tooling in Rust. Creator of Mago & the PHP Standard Library (PSL). Your sponsorship directly supports my full-time open source work.

This release brings significant improvements including method call assertions, a new parser configuration section, fault-tolerant parsing, new linter fixers, and numerous bug fixes addressing false...

🙈 Oops Turns out releasing at 4 AM after a break isn't the best idea. Sorry about that! 🐛 Bug Fix Static method closure types: Fixed incorrect return type inference for first-class callables on in...

First of all, I want to apologize for the delayed release — I've been on a break the past couple of weeks. Thank you all for your patience! 🙏 This release brings significant improvements to the ana...

Mago 1.1.0 This release includes a significant number of new features, bug fixes, and improvements across the formatter, analyzer, linter, and codex. Note: This release includes a breaking change i...