limenet/laravel-baseline

A highly opinionated Laravel baseline.

v1.1.8 2026-01-14 12:35 UTC

Requires

• php: ^8.2
• ext-simplexml: *
• illuminate/contracts: ^11.0||^12.0
• phpstan/phpstan: ^2.1.8
• spatie/laravel-package-tools: ^1.16
• symfony/finder: ^6.0 || ^7.0
• symfony/yaml: ^6.0 || ^7.0

Requires (Dev)

• larastan/larastan: ^2.9||^3.8.0
• laravel/framework: ^11.0||^12.37.0
• laravel/pint: ^1.25.1
• nikic/php-parser: ^5.6.2
• nunomaduro/collision: ^7.10.0||^8.8.2
• orchestra/testbench: ^9.0.0||^10.0.0
• pestphp/pest: ^3.8.3||^4.1.3
• pestphp/pest-plugin-arch: ^3.1.1||^4.0
• pestphp/pest-plugin-laravel: ^3.2.0||^4.0
• phpstan/extension-installer: ^1.4.3
• phpstan/phpstan-deprecation-rules: ^2.0.3
• phpstan/phpstan-phpunit: ^2.0.7
• spatie/temporary-directory: ^2.3

MIT

• Linus Metzler

• laravel
• Linus Metzler
• laravel-baseline

README

Checks your Laravel installation against a highly opinionated baseline.

Installation

You can install the package via composer:

composer require limenet/laravel-baseline

You can publish the config file with:

php artisan vendor:publish --tag="laravel-baseline-config"

Usage

"post-update-cmd": [
    "@php artisan limenet:laravel-baseline"
],

Checks

This package validates your Laravel installation against the following checks:

Testing & Quality Tools

• usesPest() - Validates Pest testing framework is configured (not PHPUnit directly)
• usesRector() - Validates Rector automated code modernization is installed
• usesLarastan() - Validates Larastan static analysis tool is configured
• usesPhpstanExtensions() - Validates PHPStan extensions are installed
• phpstanLevelAtLeastEight() - Validates PHPStan is configured to at least level 8
• usesPhpInsights() - Validates PHP Insights code quality analysis is configured
• checkPhpunit() - Validates PHPUnit configuration with coverage reports
• hasCompleteRectorConfiguration() - Validates comprehensive Rector configuration

IDE & Developer Tools

• usesIdeHelpers() - Validates Laravel IDE Helper is configured
• usesLaravelBoost() - Validates Laravel Boost AI development tool
• usesLimenetPintConfig() - Validates custom Laravel Pint formatting standards

Laravel Features & Monitoring

• usesLaravelHorizon() - Validates Laravel Horizon Redis queue manager
• usesLaravelPennant() - Warns if Laravel Pennant feature flags are missing (optional)
• usesLaravelPulse() - Validates Laravel Pulse application monitoring
• usesLaravelTelescope() - Validates Laravel Telescope request debugging
• usesSpatieHealth() - Validates Spatie Health check monitoring
• usesSpatieBackup() - Validates Spatie Backup database backups

Infrastructure & Dependencies

• usesPredis() - Validates Predis Redis client is installed
• isLaravelVersionMaintained() - Validates Laravel 11+ is used
• doesNotUseSail() - Validates Sail is NOT used (negative check)

CI/CD & Deployment

• hasCiJobs() - Validates GitLab CI pipeline jobs are properly configured
• callsSentryHook() - Warns if Sentry error tracking is missing (optional)
• phpVersionMatchesCi() - Validates PHP version consistency with CI configuration
• isCiLintComplete() - Validates complete linting pipeline
• doesNotUseIgnition() - Validates Ignition debugger is NOT installed

Local Development

• phpVersionMatchesDdev() - Validates PHP version consistency with DDEV
• ddevHasPcovPackage() - Validates DDEV coverage configuration
• ddevMutagenIgnoresNodeModules() - Validates DDEV Mutagen sync configuration

Build & Release

• bumpsComposer() - Validates automatic composer dependency bumping
• usesReleaseIt() - Validates automated release management
• hasNpmScripts() - Validates required npm build scripts

Security & Configuration

• hasEncryptedEnvFile() - Validates encrypted environment file exists
• hasGuidelinesUpdateScript() - Validates baseline guidelines update script
• callsBaseline() - Validates self-validation runs after updates

Testing

composer test

Changelog

Please see CHANGELOG for more information on what has changed recently.

Contributing

Please see CONTRIBUTING for details.

Security Vulnerabilities

Please review our security policy on how to report security vulnerabilities.

Credits

• Linus Metzler
• All Contributors

License

The MIT License (MIT). Please see License File for more information.