PHP Code Review

Tools

Aboutphpmd.org

GitHub - phpstan/phpstan: PHP Static Analysis Tool - discover bugs in your code without running it!GitHub

GitHub - vimeo/psalm: A PHP static analysis tool for finding errors and security vulnerabilities in PHP applicationsGitHub

GitHub - sebastianbergmann/php-code-coverage: Library that provides collection, processing, and rendering functionality for PHP code coverage information.GitHub

SonarQube Free & Open Source Community BuildSonarSource

Other references

PHP Code Review Checklist | TCGTCG

PHP static code analysissonarsource

Insecure Use of Dangerous Function | GuardRailsdocs.guardrails.io