yireo / magento2-extensionchecker
Scan the code of a Magento module
Fund package maintenance!
yireo
www.paypal.me/yireo
Installs: 113 659
Dependents: 2
Suggesters: 0
Security: 0
Stars: 90
Watchers: 12
Forks: 16
Open Issues: 9
Type:magento2-module
Requires
- php: ^7.4|^8.1
- ext-json: *
- ext-pcre: *
- ext-xml: *
- composer/semver: ^1.0|^2.0|^3.0
- magento/framework: ^102.0|^103.0
- nikic/php-parser: ^3.0|^4.0|^5.0
- symfony/finder: ^3.0|^4.0|^5.0|^6.0|^7.0
Requires (Dev)
- dev-master
- 2.4.4
- 2.4.3
- 2.4.2
- 2.4.1
- 2.4.0
- 2.3.4
- 2.3.3
- 2.3.2
- 2.3.1
- 2.3.0
- 2.2.10
- 2.2.9
- 2.2.8
- 2.2.7
- 2.2.6
- 2.2.5
- 2.2.4
- 2.2.3
- 2.2.2
- 2.2.1
- 2.2.0
- 2.1.4
- 2.1.3
- 2.1.2
- 2.1.1
- 2.1.0
- 2.0.4
- 2.0.3
- 2.0.2
- 2.0.1
- 2.0.0
- 1.2.17
- 1.2.16
- 1.2.15
- 1.2.14
- 1.2.13
- 1.2.12
- 1.2.11
- 1.2.10
- 1.2.9
- 1.2.8
- 1.2.7
- 1.2.6
- 1.2.5
- 1.2.4
- 1.2.3
- 1.2.2
- 1.2.1
- 1.1.3
- 1.1.2
- 1.1.1
- 1.1.0
- 1.0.2
- 1.0.1
- 1.0.0
- dev-renovate/configure
This package is auto-updated.
Last update: 2024-10-17 07:47:40 UTC
README
This extension validates the code of other extensions and is complementary to static code analysis tools like PHPCS.
Example usage
bin/magento yireo_extensionchecker:scan --module Yireo_ExampleAdminhtml
Running this command might give the following output:
Dependency "Magento_Backend" not found module.xml
Dependency "Magento_Ui" not found module.xml
Dependency "magento/module-backend" not found composer.json. Current version is 101.0.2
Dependency "magento/module-ui" not found composer.json. Current version is 101.1.2
Dependency "psr/log" not found composer.json. Current version is 1.1.0
The output gives a hint to what to add to composer.json
. For instance, a composer requirement magento/module-ui
should be added and this could have a version constraint ^101.1
to match semantic versioning. Theoretically, this could also be ^101.0
or even ^100.0|^101.0
, but for this, deep-code analysis (by you) would be needed.
Note that you can also pass multiple modules to the --module
flag by separating them with a comma:
bin/magento yireo_extensionchecker:scan --module Yireo_Example1,Yireo_Example2,Yireo_Example3
Listing dependencies (as in: dependencies detected by this ExtensionChecker) could be done with the following command:
bin/magento yireo_extensionchecker:list-dependencies --module Yireo_Example
bin/magento yireo_extensionchecker:list-dependencies --module Yireo_Example --format=json | jq
Installation
Install the module as a composer requirement for developer environments:
composer require --dev yireo/magento2-extensionchecker
bin/magento module:enable Yireo_ExtensionChecker
Note that if you want to scan a module, this module also needs to be enabled. Personally, we use this extension in our CI/CD chain, to make sure zero issues are reported at all times.
Deprecated dependencies
Class dependencies (injected via the constructor) are inspected to see if they are deprecated, for the used Magento version. You can skip this behaviour by adding a flag --hide-deprecated
to the command:
bin/magento yireo_extensionchecker:scan --module Yireo_Example --hide-deprecated=1
Undeclared dependencies
Class dependencies (injected via the constructor) are traced back to their corresponding module (or the framework or something else), which should be reflected upon in the composer.json
file and the module.xml
file. Of each composer dependencies, the current version is also reported.
Also, by tokenizing the PHP source, it is detected whether the composer.json
file should reflect a specific PHP extension (for example, ext-json
) when an extension-specific PHP function is used (for example, json_encode
).
@todo: Hard-coded Proxies
A Proxy is a DI trick which should be configured in the di.xml
file of a module and not be hard-coded in PHP. The extension could report this.
@todo: Check other methods for signature
If another method than the constructor contains type hints for imported namespaces, those namespaces lead to further dependencies with the module. For example, if a specific method returns an object of type Magento/ModuleX/SomeInterface
then Magento_ModuleX
would need to be reported as a dependency.
@todo: Scan for @since
Scan class dependencies for @since
and double-check if this minimum version matches with the composer requirements.
Tip: Check multiple modules
You can quickly check upon multiple modules with a command like this:
bin/magento yireo_extensionchecker:scan --module $(bin/magento module:status --enabled | grep -e Yireo_ | awk '{printf "%s%s",sep,$0; sep=","} END{print""}') --hide-needless 1 --hide-deprecated 1