Alternatives
Compare similar skills by workflow fit, trust score, quality, GitHub adoption, maintenance, and install readiness.
Current skill
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.
$ npx skills add phpmd/phpmdPHP Static Analysis Tool - discover bugs in your code without running it!
$ npx skills add phpstan/phpstanA tool to automatically fix PHP Coding Standards issues
$ npx skills add PHP-CS-Fixer/PHP-CS-FixerA PHP parser written in PHP
$ npx skills add nikic/PHP-ParserA tool to enforce Swift style and conventions.
$ npx skills add realm/SwiftLintCheckstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
$ npx skills add checkstyle/checkstyle🔥 ~6x faster, stricter, configurable, extensible, and beautiful drop-in replacement for golint
$ npx skills add mgechev/reviveIt's not just a linter that annoys you!
$ npx skills add pylint-dev/pylintSpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
$ npx skills add spotbugs/spotbugsKubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best practices.
$ npx skills add stackrox/kube-linterShellCheck, a static analysis tool for shell scripts
$ npx skills add koalaman/shellcheckA static analyzer for Java, C, C++, and Objective-C
$ npx skills add facebook/inferA vulnerability scanner for container images and filesystems
$ npx skills add anchore/grypeProgram for determining types of files for Windows, Linux and MacOS.
$ npx skills add horsicq/Detect-It-EasyContinuous Inspection
$ npx skills add SonarSource/sonarqubePrevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
$ npx skills add bridgecrewio/checkovHow to choose
Use an alternative when it has a clearer install path, higher trust score, fresher maintenance, or better platform fit for your current agent stack. Keep Psalm if it already passes your workflow test and repository review.
Next step
Open the compare page, test the install commands in a sandbox, and check each repository before using a skill in production.