PHPMD
phpmd.org
What it is
PHPMD analyzes PHP source code for possible bugs, inefficient patterns, complicated expressions, and unused parameters, methods, or properties. Its predefined rules flag code smells and potential errors across categories including clean code, code size, controversial practices, design, naming, and unused code. Teams can add custom rules and use security rules, and PHPMD supports CI workflows. Reports include JSON, SARIF, Checkstyle-compatible, GitHub, and GitLab options, including a GitLab renderer for GitLab CI. The project documents installation through a Phar, PHIVE, or Composer; Phar files are signed with a public key associated with [email protected]. Listed requirements are PHP >= 5.3.9 and PHP_Depend >= 2.0.0. PHPMD is free under the BSD 3-Clause license and runs on Linux, macOS, Windows, or a self-hosted setup. The homepage lists version 2.15.0, dated 2023/12/11, as the latest release shown. Help is available through the Gitter channel, while bugs and feature requests go to the issue tracker.
Spec sheet
- Purpose
- PHPMD analyzes PHP source code for possible bugs, suboptimal code, overcomplicated expressions, and unused parameters, methods, or properties.Read 7 Oct 2026 · phpmd.org
- Support
- The support page directs users to the Gitter channel for help and the issue tracker for bugs or feature requests.Read 7 Oct 2026 · phpmd.org
- License
- The project site identifies PHPMD as licensed under the BSD 3-Clause license.Read 7 Oct 2026 · phpmd.org
- Founded
- 2009Read 28 Sep 2026 · phpmd.org
- Analysis rules
- Its predefined rules detect code smells and possible errors in analyzed source code.Read 7 Oct 2026 · phpmd.org
- Company details
- The people page names Manuel Pichler as project founder and says he has been involved since 2009.Read 7 Oct 2026 · phpmd.org
- Enterprise support
- The enterprise page offers PHPMD through the Tidelift Subscription, which describes commercial support and maintenance for open-source dependencies.Read 7 Oct 2026 · phpmd.org
- GitLab CI
- Release notes state that PHPMD added a GitLab renderer for GitLab CI.Read 7 Oct 2026 · phpmd.org
- Installation
- The site documents installation as a Phar, through PHIVE, or via Composer.Read 7 Oct 2026 · phpmd.org
- Latest release shown
- The homepage lists PHPMD 2.15.0, dated 2023/12/11, as its most recent release.Read 7 Oct 2026 · phpmd.org
- PHP dependency
- The download page lists PHP >= 5.3.9 and PHP_Depend >= 2.0.0 as requirements.Read 7 Oct 2026 · phpmd.org
- Reports
- Release notes document JSON, SARIF, Checkstyle-compatible, GitHub, and GitLab report renderers or options.Read 7 Oct 2026 · phpmd.org
- Rule categories
- The documented rulesets cover clean code, code size, controversial practices, design, naming, and unused code.Read 7 Oct 2026 · phpmd.org
- Signing
- PHPMD Phar files are signed with a public key associated with [email protected].Read 7 Oct 2026 · phpmd.org
Plans and prices
Strong points and limits
Strong points
- Free under the BSD 3-Clause license
- Custom rules and security rules are supported
- Supports CI and GitLab CI reporting
- Installation options include Phar, PHIVE, and Composer
Limits
- No autofix support
- No IDE support
- Requires PHP >= 5.3.9 and PHP_Depend >= 2.0.0
Who it suits
PHPMD suits PHP developers and teams who want rule-based checks for code quality, possible errors, and security concerns. Its CI support and multiple report options also suit automated review workflows.
Verdict
PHPMD provides a broad set of source-analysis rules and report options for PHP projects. Its listed limitations are the lack of autofix and IDE support.
Where Specifiction places it
- Linters#21 of 337.7