From 41b40e9ec82428badc5160562f5050ed9b14d6b0 Mon Sep 17 00:00:00 2001 From: Sergei Predvoditelev Date: Sat, 8 Aug 2026 08:20:21 +0300 Subject: [PATCH 1/2] Add Composer Dependency Analyser --- ...er.yml => composer-dependency-analyser.yml} | 12 +++++------- composer-dependency-analyser.php | 16 ++++++++++++++++ composer-require-checker.json | 18 ------------------ composer.json | 5 +++-- docs/internals.md | 6 +++--- 5 files changed, 27 insertions(+), 30 deletions(-) rename .github/workflows/{composer-require-checker.yml => composer-dependency-analyser.yml} (57%) create mode 100644 composer-dependency-analyser.php delete mode 100644 composer-require-checker.json diff --git a/.github/workflows/composer-require-checker.yml b/.github/workflows/composer-dependency-analyser.yml similarity index 57% rename from .github/workflows/composer-require-checker.yml rename to .github/workflows/composer-dependency-analyser.yml index b97e6c2..eaa3762 100644 --- a/.github/workflows/composer-require-checker.yml +++ b/.github/workflows/composer-dependency-analyser.yml @@ -1,4 +1,4 @@ -name: Composer require checker +name: composer dependency analyser on: pull_request: @@ -6,9 +6,9 @@ on: - 'src/**' - 'config/**' - 'tests/**' + - '.github/workflows/composer-dependency-analyser.yml' - 'composer.json' - - 'composer-require-checker.json' - - '.github/workflows/composer-require-checker.yml' + - 'composer-dependency-analyser.php' push: branches: ['master'] paths: *paths @@ -21,10 +21,8 @@ concurrency: cancel-in-progress: true jobs: - composer-require-checker: - uses: yiisoft/actions/.github/workflows/composer-require-checker.yml@master + composer-dependency-analyser: + uses: yiisoft/actions/.github/workflows/composer-dependency-analyser.yml@master with: - os: >- - ['ubuntu-latest'] php: >- ['8.1', '8.2', '8.3', '8.4', '8.5'] diff --git a/composer-dependency-analyser.php b/composer-dependency-analyser.php new file mode 100644 index 0000000..47e496a --- /dev/null +++ b/composer-dependency-analyser.php @@ -0,0 +1,16 @@ +disableComposerAutoloadPathScan() + ->setFileExtensions(['php']) + ->addPathToScan(__DIR__ . '/config', isDev: false) + ->addPathToScan(__DIR__ . '/src', isDev: false) + ->addPathToScan(__DIR__ . '/tests', isDev: true) + // AliasReference optionally implements/type-hints these interfaces without requiring + // the packages at runtime; previously whitelisted the same way in composer-require-checker.json. + ->ignoreErrorsOnPackages(['psr/container', 'yiisoft/definitions'], [ErrorType::DEV_DEPENDENCY_IN_PROD]); diff --git a/composer-require-checker.json b/composer-require-checker.json deleted file mode 100644 index 5445642..0000000 --- a/composer-require-checker.json +++ /dev/null @@ -1,18 +0,0 @@ -{ - "symbol-whitelist": [ - "Psr\\Container\\ContainerInterface", - "Yiisoft\\Definitions\\Contract\\ReferenceInterface" - ], - "php-core-extensions": [ - "Core", - "date", - "json", - "pcre", - "Phar", - "Reflection", - "SPL", - "standard", - "fileinfo" - ], - "scan-files": [] -} diff --git a/composer.json b/composer.json index dd4290c..14e397f 100644 --- a/composer.json +++ b/composer.json @@ -29,12 +29,12 @@ "php": "8.1 - 8.5" }, "require-dev": { - "friendsofphp/php-cs-fixer": "^3.92.4", "bamarni/composer-bin-plugin": "^1.8.3", - "maglnet/composer-require-checker": "^4.7.1", + "friendsofphp/php-cs-fixer": "^3.92.4", "phpunit/phpunit": "^10.5.48", "psr/container": "^2.0.2", "rector/rector": "^2.1.2", + "shipmonk/composer-dependency-analyser": "^1.8", "spatie/phpunit-watcher": "^1.24.0", "yiisoft/definitions": "^3.4", "yiisoft/di": "^1.4", @@ -72,6 +72,7 @@ } }, "scripts": { + "dependency-analyser": "composer-dependency-analyser", "test": "phpunit --testdox --no-interaction", "test-watch": "phpunit-watcher watch" } diff --git a/docs/internals.md b/docs/internals.md index 087a514..b77907c 100644 --- a/docs/internals.md +++ b/docs/internals.md @@ -36,9 +36,9 @@ use either newest or any specific version of PHP: ## Dependencies -This package uses [composer-require-checker](https://github.com/maglnet/ComposerRequireChecker) to check if -all dependencies are correctly defined in `composer.json`. To run the checker, execute the following command: +Use [Composer Dependency Analyser](https://github.com/shipmonk-rnd/composer-dependency-analyser) to detect unknown, +shadow, and unused [Composer](https://getcomposer.org) dependencies: ```shell -./vendor/bin/composer-require-checker +./vendor/bin/composer-dependency-analyser ``` From 3852e7574aefd0b5544431faac3b9e16d35bf4b6 Mon Sep 17 00:00:00 2001 From: Sergei Predvoditelev Date: Sat, 8 Aug 2026 15:07:43 +0300 Subject: [PATCH 2/2] fix --- composer-dependency-analyser.php | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/composer-dependency-analyser.php b/composer-dependency-analyser.php index 47e496a..380cd30 100644 --- a/composer-dependency-analyser.php +++ b/composer-dependency-analyser.php @@ -11,6 +11,5 @@ ->addPathToScan(__DIR__ . '/config', isDev: false) ->addPathToScan(__DIR__ . '/src', isDev: false) ->addPathToScan(__DIR__ . '/tests', isDev: true) - // AliasReference optionally implements/type-hints these interfaces without requiring - // the packages at runtime; previously whitelisted the same way in composer-require-checker.json. + // AliasReference optionally implements these interfaces without requiring the packages at runtime ->ignoreErrorsOnPackages(['psr/container', 'yiisoft/definitions'], [ErrorType::DEV_DEPENDENCY_IN_PROD]);