PHP_CodeSniffer

Making it easy to make your code more maintainable.

[markus staab | @[email protected] @markusstaab]

Had a few hours left this morning, so I looked into #php #codesniffer performance.

Suggested 2 changes which make it 20-25% faster when running it on phpstan-src.
Fingers crossed we can get these into the next release.

[PHP_CodeSniffer @PHP_CodeSniffer]

Released: PHPCSDevTools 1.2.5

This release fixes compatibility of the PHPCS Docs XSD file with the XMLLint version which installs on he `ubuntu-26.04` runner image.

https://t.co/OVVPU9mV58

[@courtneyr_dev 🌻 @courtneyr_dev]

@adityakane While I was with GoDaddy, I advocated directing funds to the PHP Foundation and PHPCS (a separate project) because we obviously depended heavily on both. I hope to see more hosts support both initiatives and any other app or tool that leverages PHP.

[Juliette (@[email protected]) @jrf_nl]

If you agree that this is inconceivably irresponsible: let this be your call to action and FUND THE OPEN SOURCE PROJECTS YOUR ORGANIZATION RELIES ON.

Saying "Thanks" once in a while is not enough and does not make open source sustainable.

[Juliette (@[email protected]) @jrf_nl]

Unless you live under a stone, everybody will have heard about PHP today.

Now, please realize that the vast majority of Open Source Software, like PHP, and including PHP, is largely maintained by **unpaid volunteers**.

[PHP_CodeSniffer @PHP_CodeSniffer]

Released: PHPCSDevTools 1.2.4

This is a maintenance release.

https://t.co/A5ZstRqnGF

[PHP_CodeSniffer @PHP_CodeSniffer]

Thank you @somtijds for supporting our work!

[Willem Prins @somtijds]

@syntaxfm As a PHP person I can't _not_ nominate the awesome @jrf_nl for her work on PHP_CodeSniffer and other great tools and libraries.

[Juliette (@[email protected]) @jrf_nl]

The project owes a huge debt of gratitude to @gregsherwood for all the years of tirelessly maintaining it and to the hundreds of people who have contributed to it over the years.

Thank you all! Now, onward to the next twenty years!

[Juliette (@[email protected]) @jrf_nl]

Happy 20th birthday to PHP_CodeSniffer!

While the project started a few months earlier in-company, the first public (SVN) commit is twenty years ago today.

https://t.co/tbHKZZ8p4E

[PHP_CodeSniffer @PHP_CodeSniffer]

Thanks go to Faze-up and @__edorian for responsibly disclosing the vulnerability and to @__edorian, @rodrigosprimo, Dan Wallis and @jrf_nl for creating and testing the fix.

Additionally, the project is happy to welcome 6 new contributors with this release.

[PHP_CodeSniffer @PHP_CodeSniffer]

Released: PHP_CodeSniffer 4.0.2/4.0.4

This is a security release fixing an OS command injection vulnerability, as well as containing a number of other improvements and bug fixes.
Users are advised to upgrade as soon as possible.

https://t.co/zrNyr2I0Ow
https://t.co/hrXOkderF8

[PHP_CodeSniffer @PHP_CodeSniffer]

Note: the 4.0.4 release is essentially the same as the 4.0.2 release, with the only difference being the version number.

[PHP_CodeSniffer @PHP_CodeSniffer]

Thanks go to Faze-up and @__edorian for responsibly disclosing the vulnerability and to @__edorian, @rodrigosprimo, Dan Wallis and @jrf_nl for creating and testing the fix.

[PHP_CodeSniffer @PHP_CodeSniffer]

Released: PHP_CodeSniffer 3.13.6

This is a security release fixing an OS command injection vulnerability.
Users are advised to upgrade as soon as possible.

https://t.co/RsNJ9i5Nql

[Juliette (@[email protected]) @jrf_nl]

Released: PHPCompatibilitySymfony 2.0.0-alpha3

This release accounts for the latest changes in the Symfony polyfills as per the v1.41.0 release from yesterday.

https://t.co/0DQhvTWqnv

[PHP_CodeSniffer @PHP_CodeSniffer]

Released: PHPCSExtra 1.5.1

This release updates the minimum PHPCSUtils dependency to a non-vulnerable version.

https://t.co/KHJYszqxDH

[PHP_CodeSniffer @PHP_CodeSniffer]

Released: PHPCSUtils 1.2.3

This is a security release fixing an arbitrary code execution vulnerability.
Users are advised to upgrade as soon as possible.

Thanks go to @rodrigosprimo and @__edorian for working with me on this.

https://t.co/8q3vpwBSbY

[Juliette (@[email protected]) @jrf_nl]

Released: WordPress Coding Standards 3.4.0

This release contains a few bug fixes and a slew of new sniff documentation.

WordPressCS has also been updated to provide information in line with the latest WordPress version.

Go get it while it's hot:
https://t.co/kcfeSKGjXv

[PHP_CodeSniffer @PHP_CodeSniffer]

Released: Composer plugin for PHP_CodeSniffer version 1.2.1

This version fixes an issue people could run into when an `open_basedir` directive is in effect.

https://t.co/ykE6OOtd9H

[WP More ⓦ @WPMoree]

PHP_CodeSniffer maintainer Juliette Reinders Folmer has warned that critical PHP infrastructure is increasingly at risk as maintainer workloads grow and funding lags behind real-world reliance.
→ https://t.co/xrColZjwI6

(h/t: @therepositorywp)