I focus mostly on PHP ecosystem surface: static analysis, PHP internals, security of PHP applications. My open source work started a few years before AI agents became part of the picture; they've since become a useful accelerant, but the direction was already set. Below you can see some of my projects or the projects that I contribute to.
Co-maintainer of the session extension and RFC author. Session security hardening, BCMath performance and bug fixes across the core.
A fast language server for PHP, written in Rust.
A fast, incremental PHP static analyzer written in Rust, with 140+ diagnostic rules covering types, dead code and taint analysis.
A fault-tolerant PHP parser implemented in Rust, the foundation for php-lsp and mir.
The framework behind PHP's JIT compiler. Fixes to AArch64 and x86-64 code generation and to the optimizer.
Software bill of materials for six PHP 8.5 builds: who builds each, the code bundled in php-src, and the OS packages it links. CycloneDX download.
Organization supporting the software supply chain security of non-profit organizations.
PHP parser written in JavaScript.
PHP plugin for the Prettier code formatter.
Nearly 11,000 reputation and 7 gold badges, from answers on PHP and JavaScript.
Psalm, Rector, nikic/PHP-Parser, Composer, and more.