Official Psalm channel
63 subscribers
43 links
Official news channel for Psalm, a PHP static analysis tool for finding errors and security vulnerabilities in PHP applications!
Download Telegram
For anyone thinking about the release frequency: Psalm will be switching to rolling releases starting from v7, with automated releases every hour or so if CI passes; this already applies now to rcs and betas
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥5
Security analysis is on by default: types, taints and dead code in one pass, on a rewritten, 10x faster taint engine.

New: NoSQL, LLM prompt and URL injection, php://input and upload names as sources, taint through closures and generators.

Try it: https://psalm.dev/r/7631291cc5
Hack-style purity: declare which side effects code may have (io, time, write-props...) and catch the "pure" function that reads the clock or edits its input.

Purity templates make array_map() and your interfaces as pure as what you pass them.

Try it: https://psalm.dev/r/be7eb39420