The below list of tools is provided by the phpqa docker image. Toolbox is used to install them in the image.
Automatically corrects twig files following the official coding standard rules
VincentLanglet/Twig-CS-FixerSuggests a next version according to semantic versioning
tomzx/php-semver-checkerTool to compare two revisions of a class API to check for BC breaks
Roave/BackwardCompatibilityCheckVerify that no unknown symbols are used in the sources of a package.
maglnet/ComposerRequireCheckerVerify that no unknown symbols are used in the sources of a package.
maglnet/ComposerRequireCheckerFinds vulnerabilities and weaknesses related to security in PHP code
FloeDesignTechnologies/phpcs-security-auditPHPStan rules for detecting deprecated code
phpstan/phpstan-deprecation-rulesPHPStan rules for checked and unchecked exceptions
pepakriz/phpstan-exception-rulesPHPStan rules for detecting calls to specific functions you don't want in your project
ekino/phpstan-banned-codeChecks composer dependencies for known security vulnerabilities
fabpot/local-php-security-checkerA fuzzer for PHP, which can be used to find bugs in libraries by feeding them 'random' inputs
nikic/PHP-FuzzerProvides utilities to report legacy tests and usage of deprecated code
symfony.com/doc/current/components/phpunit_bridge.html