Repository navigation

All pull requests

Add Infection for mutation testing
#12506danog opened Oct 26, 2026Collaborator
2
[6.x] Keep statements of inlined constructor callees: ~60% fewer parser cache reads, ~35% less CPU on Laravel (arrayCache=false)
#12496jarstelfox opened Oct 25, 2026Contributor
[7.x] Support call-site variance (covariant, contravariant, *) in generic type arguments
#12495alies-dev opened Oct 24, 2026Contributor
[6.x] Fix crash when a class extends a class_alias() declared later
#12494wleeaf opened Oct 24, 2026
2
[6.x] Fix a ~600 MiB memory regression from 6.19.2 (nullsafe chain state on every node)
#12493jarstelfox opened Oct 23, 2026Contributor
Take the operand of a field's $eq in a filter literal given to a nosql sink for no NoSQL injection
#12491danog opened Oct 23, 2026Collaborator
Let plugins get the taint nodes of the return, arguments and object of a call, and assign properties
#12489danog opened Oct 23, 2026Collaborator
2
Keep the parameter sinks of a stub method when a later stub redeclares it
#12479danog opened Oct 23, 2026Collaborator
[6.x] Fix: stubbed override of a trait-provided method is ignored in subclasses
#12475alies-dev opened Oct 23, 2026Contributor
[7.x] Fix: empty and falsy conditional conditions resolve to the else branch
#12448alies-dev opened Oct 21, 2026Contributor
[7.x] Fix: empty array takes both branches of a conditional with a union subject containing non-empty-array
#12447alies-dev opened Oct 21, 2026Contributor
[7.x] Fix: Bound a constructed template by its siblings' constraints
#12443jarstelfox opened Oct 20, 2026Contributor
[7.x] Fix: Don't carry a variable read where it's undefined into the loop's next iteration
#12442jarstelfox opened Oct 20, 2026Contributor
[7.x] Fix: Resolve an unbound type variable in a union to mixed, as an unbound template is
#12441jarstelfox opened Oct 20, 2026Contributor
[7.x] Fix: Keep a variable a nested loop defines before every break defined after it
#12439jarstelfox opened Oct 20, 2026Contributor
[7.x] Fix: Don't intersect strings with objects with __toString()
#12438jarstelfox opened Oct 20, 2026Contributor
2
[7.x] Fix: Put an object with __toString() in the else branch of a conditional on string
#12437jarstelfox opened Oct 20, 2026Contributor
[7.x] Fix: Don't report plugin-added class suppressions as unused
#12436jarstelfox opened Oct 20, 2026Contributor
[7.x] Fix: ds stub: declare getIterator() so foreach over Ds collections is not impure
#12435jarstelfox opened Oct 20, 2026Contributor
[7.x] Fix: Don't treat one-way ctype_* assertions as redundant on expressions
#12434jarstelfox opened Oct 20, 2026Contributor
DeprecatedClass on declarations depends on analysis order (failing tests)
#12402a-astapov opened Oct 16, 2026
Add @optional-arguments-by-name, @arguments-by-name and @stable-parameter-names
#12389nicolas-grekas opened Oct 14, 2026
9
Taint analysis: resolve the array keys that are parameters to the keys each call passes, through unspecialized, nested and despecialized calls
#12377danog opened Oct 14, 2026Collaborator
Track the taints of an object that cannot change after construction per instance
#12365aszenz opened Oct 13, 2026Contributor
3
CLI output (3/3): one-line actionable messages
#12317alies-dev opened Oct 10, 2026Contributor
5

Navigation Menu

Repository navigation

All pull requests

Add Infection for mutation testing

[6.x] Keep statements of inlined constructor callees: ~60% fewer parser cache reads, ~35% less CPU on Laravel (arrayCache=false)

[7.x] Support call-site variance (covariant, contravariant, *) in generic type arguments

[6.x] Fix crash when a class extends a class_alias() declared later

[6.x] Fix a ~600 MiB memory regression from 6.19.2 (nullsafe chain state on every node)

Take the operand of a field's $eq in a filter literal given to a nosql sink for no NoSQL injection

Let plugins get the taint nodes of the return, arguments and object of a call, and assign properties

Keep the parameter sinks of a stub method when a later stub redeclares it

[6.x] Fix: stubbed override of a trait-provided method is ignored in subclasses

[7.x] Fix: `empty` and `falsy` conditional conditions resolve to the else branch

[7.x] Fix: empty array takes both branches of a conditional with a union subject containing non-empty-array

[7.x] Fix: Bound a constructed template by its siblings' constraints

[7.x] Fix: Don't carry a variable read where it's undefined into the loop's next iteration

[7.x] Fix: Resolve an unbound type variable in a union to mixed, as an unbound template is

[7.x] Fix: Keep a variable a nested loop defines before every break defined after it

[7.x] Fix: Don't intersect strings with objects with __toString()

[7.x] Fix: Put an object with __toString() in the else branch of a conditional on string

[7.x] Fix: Don't report plugin-added class suppressions as unused

[7.x] Fix: ds stub: declare getIterator() so foreach over Ds collections is not impure

[7.x] Fix: Don't treat one-way ctype_* assertions as redundant on expressions

DeprecatedClass on declarations depends on analysis order (failing tests)

Add `@optional-arguments-by-name`, `@arguments-by-name` and `@stable-parameter-names`

Taint analysis: resolve the array keys that are parameters to the keys each call passes, through unspecialized, nested and despecialized calls

Track the taints of an object that cannot change after construction per instance

CLI output (3/3): one-line actionable messages

Pull requests