{"id":27105,"date":"2016-12-11T16:42:15","date_gmt":"2016-12-11T14:42:15","guid":{"rendered":"https:\/\/mamchenkov.net\/wordpress\/?p=27105"},"modified":"2016-12-11T16:42:15","modified_gmt":"2016-12-11T14:42:15","slug":"php-static-analysis-tool-discover-bugs-in-your-code-without-running-it","status":"publish","type":"post","link":"https:\/\/mamchenkov.net\/wordpress\/2016\/12\/11\/php-static-analysis-tool-discover-bugs-in-your-code-without-running-it\/","title":{"rendered":"PHP Static Analysis Tool – discover bugs in your code without running it!"},"content":{"rendered":"\n

Ond\u0159ej Mirtes<\/a> shares the idea behind the creation of\u00a0PHPStan<\/a> – a static analysis tool for PHP:<\/p>\n

\n

Compiled languages need to know about the type of every variable, return type of every method etc. before the program runs. This is why the compiler needs to make sure that the program is \u201ccorrect\u201d and will happily point out to you these kinds of mistakes in the source code, like calling an undefined method or passing a wrong number of arguments to a function. The compiler acts as a first line of defense before you are able to deploy the application into production.<\/p>\n

On the other hand, PHP is nothing like that. If you make a mistake, the program will crash when the line of code with the mistake is executed. When testing a PHP application, whether manually or automatically, developers spend a lot of their time discovering mistakes that wouldn\u2019t even compile in other languages, leaving less time for testing actual business logic.<\/p>\n

I\u2019d like to change that.<\/p>\n<\/blockquote>\n

This made sense to me, so I rushed to the repository<\/a>. \u00a0I have quite a few projects to try this on. \u00a0I hurried so much that I didn’t pay attention to the important notes (aka prerequisities<\/a>). \u00a0These are:<\/p>\n

PHPStan requires PHP 7.0. You have to run it in environment with PHP 7 but the actual code does not have to use PHP 7 features. (Code written for PHP 5.6 and earlier can run on 7 mostly unmodified.)<\/p>\n

PHPStan works best with modern object-oriented code. The more strongly-typed your code is, the more information you give PHPStan to work with.<\/p>\n

Properly annotated and typehinted code (class properties, function and method arguments, return types) helps not only static analysis tools but also other people that work with the code to understand it.<\/p><\/blockquote>\n

Erm … if I had properly annotated and typehinted code, which is nicely organized into objects, I think, I wouldn’t need PHPStan as much as I need it now. \u00a0Anybody can analyze beautiful code. \u00a0Try figuring out what’s going on in a WordPress theme with 150 PHP files, split into classes, functions and chunks of unmaintainable code. \u00a0That’s where I wanted PHPStan to help me.<\/p>\n

But OK. \u00a0Let’s see what it can do. \u00a0Gladly, my laptop already runs PHP 7<\/a> – here is a good first use for it.<\/p>\n

Intstalling PHPStan with composer was easy. \u00a0All I had to do was resolve the\u00a0nikic\/php-parser<\/a> dependency conflict between PHPStan and Sami<\/a>, which is our source code documentation tool of choice (the newer version uses a much more recent version of the PHP Parser, so it wasn’t rocket science).<\/p>\n

Once installed, a simple “vendor\/bin\/phpstan analyse .\/src<\/em>” command produced a report with a few issues. \u00a0Most of those were false positives, which can be fixed with a bit of PHPStan configuration. \u00a0But a few real problems that were found, were indeed bits that sneaked through our automated and manual testing. \u00a0For example:<\/p>\n

\r\n------ ---------------------------------\r\n Line   src\/Shell\/EmailShell.php\r\n------ ---------------------------------\r\n 37      Return typehint of method App\\Shell\\EmailShell::getOptionParser() has invalid type App\\Shell\\ConsoleOptionParser.\r\n------ ---------------------------------\r\n<\/pre>\n
I don’t think we’ll use PHPStan across all our code base just yet. \u00a0It’ll be too noisy for some projects. \u00a0And the PHP 7 requirement is not that easy to satisfy just yet. \u00a0But maybe sometime next year, once we finalize our move to PHP 7, I will integrate it into our automatic testing process.<\/p>\n
All in all, it’s quite a useful tool and much needed for larger code bases.<\/p>\n\n","protected":false},"excerpt":{"rendered":"\n
Ond\u0159ej Mirtes shares the idea behind the creation of\u00a0PHPStan – a static analysis tool for PHP: Compiled languages need to know about the type of every variable, return type of every method etc. before the program runs. This is why the compiler needs to make sure that the program is \u201ccorrect\u201d and will happily point … Continue reading PHP Static Analysis Tool – discover bugs in your code without running it!<\/span><\/a><\/p>\n\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"PHP Static Analysis Tool - discover bugs in your code without running it! #PHP #WebDev #QA #testing","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false,"_links_to":"","_links_to_target":""},"categories":[1,18,62,1334],"tags":[38,3074,1108,1330],"keyring_services":[],"class_list":["post-27105","post","type-post","status-publish","format-standard","hentry","category-general","category-programming","category-technology","category-web-work","tag-php","tag-quality-assurance","tag-testing","tag-web-development"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t