1.4.0

New features:

• Ability to scan codebase outside of installed folder (#93)
  • This allows usage of composer-bin-plugin, easy scans of codebases with PHP < 7.2, composer's global install, single install in monorepo and similar approaches
• Ability to dump usages of a package via --dump-usages symfony/console (#88)
  • Handy when verifying reported issues

Improvements:

• Support absolute path in --composer-json and --config (#98)
• Ensure ext-tokenizer is present (#104)

1.3.1

Fixes:

• Fix false-positive when FQN reference of a non-lowercase function is used (#90)

1.3.0

Improvements

• Performance boost of 40-60% depending on a project (#65, #66)

New features

• Support multiple composer class loaders (#82)
  • This allows proper analysis in libraries extending PHPStan (example)

Fixes

• Fix edgecase where use Trait is treated as use statement (#69)

1.2.1

Fixes

• File extension does not apply for directly listed files (#61, #62)

1.2.0

New features

• Detect even classes inside phar archives (e.g. PHPStan classes) (#51)
• Remove requirement to call composer dump-autoload -a before execution (#53, #57)
• Output run summary even when issue is found (#58)

Fixes

• Fix false positive when \array or \callable is used (#46)
• Fix unknown class report when package uses autoload.files composer section even for classes (#50)
• Fix duplicate file scan when autoload paths overlap (#52)
• Fix path miscategorization when dev path is inside prod one (#54)

1.1.0

New features

• Support classmap autoload sections in composer.json (#40)

1.0.0

First stable release

• Tested with many OS pojects giving valuable results
• Used in huge project's CI for quite some time

Features

• Detects shadow, dead and misplaced dependencies
• Fine-grained ignores (config file or CLI options)
• Immense performance (15k files in 3s)
• Compatible with PHP 7.2 - PHP 8.3
• Useless ignore detection
• Zero composer dependencies
• Zero configuration needed for first run (autodetected from composer)
• Ability to extract used symbols from yaml, json, xml, neon, ...