Skip to content
mir

mir

MIR

PHP Static Analyzer

Precision. Structure. Signal. █

Get StartedTry PlaygroundGitHub

Install

Section titled “Install”
Terminal window
composer require --dev miropen/mir-php
vendor/bin/mir src/

What mir reports

Section titled “What mir reports”
$ mir analyze src/
src/Controller/UserController.php:42:5  UndefinedMethod   Method User::getName() does not exist
src/Service/Mailer.php:17:12            InvalidArgument   Argument 1 of sendMessage expects string, int provided
src/Domain/Order.php:88:9              NullMethodCall     Cannot call method on possibly null value
src/Http/Search.php:23:14              TaintedSql         Tainted data from $_GET flows into SQL sink


4 errors in 312 files · 0.42s

Browse by category

Section titled “Browse by category”
Undefined Missing variables, functions, methods, classes, properties, constants.
Nullability Null arguments, dereferences, returns; possibly-null variants.
Type mismatches Arguments, return types, casts, operands, by-reference passing.
Array Invalid offsets and access on possibly-missing keys.
Redundancy Conditions that can't fail, casts and annotations that do nothing.
Dead code Unused variables, parameters, methods, properties, functions; unreachable code.
Inheritance Abstract / interface compliance, signature and visibility mismatches, final violations.
Security Taint analysis from `$_GET` / `$_POST` to HTML, SQL, and shell sinks.
Generics `@template` parameter constraint and substitution checks.
Other Deprecations, internal access, throws, readonly, parse and docblock errors.

Get going

Section titled “Get going”
Getting Started Install, run your first analysis, understand the output.
Configuration `mir.xml`, error levels, issue handlers, baselines.
CLI Reference Every flag, output format, exit code.
Architecture How mir is built: Salsa, passes, caching.