mir

A fast, incremental PHP static analyzer written in Rust, with 140+ diagnostic rules covering types, dead code and taint analysis.

Finds type errors, dead code and taint vulnerabilities before they reach production. Inspired by Psalm and still in active development.