Skip to content
mir

mir

MIR

PHP Static Analyzer

Precision. Structure. Signal. █

Get StartedTry PlaygroundGitHub

Install

Section titled “Install”
Terminal window
composer require --dev miropen/mir-php
vendor/bin/mir src/

What mir reports

Section titled “What mir reports”
$ mir analyze src/
src/Controller/UserController.php:42:5  UndefinedMethod   Method User::getName() does not exist
src/Service/Mailer.php:17:12            InvalidArgument   Argument 1 of sendMessage expects string, int provided
src/Domain/Order.php:88:9              NullMethodCall     Cannot call method on possibly null value
src/Http/Search.php:23:14              TaintedSql         Tainted data from $_GET flows into SQL sink


4 errors in 312 files · 0.42s

Browse by category

Section titled “Browse by category”
UndefinedMissing variables, functions, methods, classes, properties, constants.
NullabilityNull arguments, dereferences, returns; possibly-null variants.
Type mismatchesArguments, return types, casts, operands, by-reference passing.
ArrayInvalid offsets and access on possibly-missing keys.
RedundancyConditions that can't fail, casts and annotations that do nothing.
Dead codeUnused variables, parameters, methods, properties, functions; unreachable code.
InheritanceAbstract / interface compliance, signature and visibility mismatches, final violations.
SecurityTaint analysis from `$_GET` / `$_POST` to HTML, SQL, and shell sinks.
Generics`@template` parameter constraint and substitution checks.
OtherDeprecations, internal access, throws, readonly, parse and docblock errors.

Get going

Section titled “Get going”
Getting StartedInstall, run your first analysis, understand the output.
Configuration`mir.xml`, error levels, issue handlers, baselines.
CLI ReferenceEvery flag, output format, exit code.
ArchitectureHow mir is built: Salsa, passes, caching.