typedduck/steins

A value-precise static analyzer for PHP that reports only what provably breaks at runtime.

Maintainers

Package info

github.com/rigortype/steins

Language:Rust

pkg:composer/typedduck/steins

Transparency log

Statistics

Installs: 8

Dependents: 0

Suggesters: 0

Stars: 5

Open Issues: 27

Security

Advisories: 0

Aikido package health analysis

v0.1.2 2026-07-29 18:18 UTC

Requires

Suggests

  • ext-curl: To show progress while the analyzer binary downloads

Apache-2.0 c7609d6805c0aa10d1448148de96d63cb4dc23b4

  • USAMI Kenta <tadsan.woop@zonu.me>

static analysisdev

Published on Packagist.org on 2026-07-29 18:18 UTC

This package is auto-updated.

Last update: 2026-08-01 10:21:15 UTC

README

A shameless knockoff heavily 'inspired' by PHPStan, born from my grand delusions. It is a cursed dead copy designed to destroy your codebase deceive the Organization and rewrite the worldline of static analysis. El Psy Kongroo.

Steins is pronounced /ʃtaɪn/ — rhymes with shine, not stine, like the German -stein in Albert Einstein. The trailing s is often forgotten by lazy Japanese speakers — myself included.

Install

composer require --dev typedduck/steins

Composer installs a PHP shim that fetches the matching release binary on first use, verifies its published sha256, and runs it — so the analyzer pins in composer.lock beside the code it analyzes.

Or brew install rigortype/tap/steins, a prebuilt binary, or cargo install --git https://github.com/rigortype/steins steins-cli. Quickstart covers which fits what, and steins doctor --no-php confirms any of them.

Docs

  • Why effects? — the motivation, the Flix and PHPStan lineage, the intended value, and why this is not algebraic effects for PHP.
  • Quickstart — install, first run, exit codes, limits.
  • Handbook — a guided tour of what Steins proves: the guarantee, the type system, narrowing, and effects.
  • Profiles and baseline — named stages, the baseline ratchet, steins.toml.

Specifications

  • Type specification — what the analysis means: the value domain, acceptance, narrowing, effects, throws, diagnostic policy.
  • Internal specification — analyzer-internal contracts: crate topology, syntax tree, trace IR, query graph, sidecar, config, transforms.
  • Not implemented — the honest gap list.
  • Roadmap — milestones, exit criteria, and the refusal list.

Copyright

Apache-2.0 (LICENSE). The #[\Steins\Pure] and #[\Steins\Effect] attributes are a separate MIT package, rigortype/steins-attributes.

Copyright 2026 TypedDuck, USAMI Kenta <tadsan@zonu.me>

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.