mralaminahamed/secure-custom-fields-stubs

Secure Custom Fields (ACF-compatible) function and class declaration stubs for static analysis.

v6.8.9 2026-06-19 11:25 UTC

Requires

• php-stubs/wordpress-stubs: ^5.3 || ^6.0

Requires (Dev)

• php: ~7.4 || ~8.0
• php-stubs/generator: ^0.8.0
• phpstan/phpstan: ^1.10
• phpunit/phpunit: ^7.5 || ^8.5 || ^9.5
• squizlabs/php_codesniffer: ^3.7

Suggests

• szepeviktor/phpstan-wordpress: WordPress extensions for PHPStan

MIT

• Al Amin Ahamed

• wordpress
• static analysis
• stubs
• wordpress-plugin
• acf
• custom-fields
• advanced-custom-fields
• PHPStan
• secure-custom-fields

README

PHPStan / static-analysis stubs for the Secure Custom Fields WordPress plugin — the WordPress.org-maintained, ACF-compatible custom-fields plugin.

Use these when your plugin/theme calls Secure Custom Fields (or ACF-compatible) functions like get_field(), the_field(), acf_*(), have_rows(), etc., so PHPStan knows their signatures instead of reporting "undefined function".

Install

composer require --dev mralaminahamed/secure-custom-fields-stubs

Pin to a plugin version if you want stubs matching a specific release:

composer require --dev mralaminahamed/secure-custom-fields-stubs:6.8.9

Use with PHPStan

Reference the stub files in your phpstan.neon:

parameters:
    scanFiles:
        - vendor/mralaminahamed/secure-custom-fields-stubs/secure-custom-fields-stubs.stub
        - vendor/mralaminahamed/secure-custom-fields-stubs/secure-custom-fields-constants-stubs.stub

Versioning

Releases are tagged v<plugin-version> (e.g. v6.8.9) and track the upstream Secure Custom Fields releases. Each tag's stubs are generated from that exact plugin version.

Regenerate locally

composer install
bash bin/release-latest-versions.sh 5   # latest 5 stable versions
# or, against a source/ you placed manually:
bash bin/generate.sh

License

MIT. Stub declarations are generated from the GPL-licensed Secure Custom Fields plugin source using php-stubs/generator.