Astral vs PHPMD

Astral makes open-source tools for Python development, including Ruff, a linter, and uv, a package and project manager. Both are written in Rust. uv brings together project management, a universal lockfile, script execution, Python version management, tool installation, workspaces and a pip-compatible interface. Astral describes that interface as providing a 10–100x speedup over pip. uv supports macOS, Linux and Windows. Its documented integrations include Docker, Jupyter, marimo, GitHub Actions, GitLab CI/CD, pre-commit, PyTorch, FastAPI, Bazel, artifact registries, Renovate, Dependabot, AWS Lambda and Coiled. Astral says its tools are permissively licensed and free forever. It describes security controls for workflows and releases, including read-only default workflow permissions, full-length commit-SHA pinning, Trusted Publishing, Sigstore attestations and immutable GitHub releases. Documentation directs users to its Discord community for support. The separate pyx package registry offers optimized installs and other package-management features, but is no longer accepting new signups. Astral has announced an agreement to join OpenAI as part of the Codex team.

PHPMD analyzes PHP source code for possible bugs, inefficient patterns, complicated expressions, and unused parameters, methods, or properties. Its predefined rules flag code smells and potential errors across categories including clean code, code size, controversial practices, design, naming, and unused code. Teams can add custom rules and use security rules, and PHPMD supports CI workflows. Reports include JSON, SARIF, Checkstyle-compatible, GitHub, and GitLab options, including a GitLab renderer for GitLab CI. The project documents installation through a Phar, PHIVE, or Composer; Phar files are signed with a public key associated with [email protected]. Listed requirements are PHP >= 5.3.9 and PHP_Depend >= 2.0.0. PHPMD is free under the BSD 3-Clause license and runs on Linux, macOS, Windows, or a self-hosted setup. The homepage lists version 2.15.0, dated 2023/12/11, as the latest release shown. Help is available through the Gitter channel, while bugs and feature requests go to the issue tracker.