Files
XC_VM/src/composer.json
T
Divarion_D 9ffbe1a34b build: add on-demand phpstan-deadcode audit (unused-public)
Adds a `make phpstan-deadcode` target and build/phpstan-deadcode.neon that
layer tomasvotruba/unused-public on top of the main PHPStan setup to report
unused PUBLIC methods/properties/constants. It is an on-demand audit, NOT a
CI gate (expect false positives for dynamically-invoked code — routes,
#[ListensTo] subscribers, CLI handlers, view templates).

unused-public is a require-dev package (installed by `make dev-tools`); the
committed vendor/ stays production-only.
2026-08-11 21:45:32 +03:00

39 lines
1.4 KiB
JSON

{
"name": "vateron-media/xc-vm",
"description": "XC_VM IPTV panel — Composer autoloader (PSR-4) deployed as /home/xc_vm/. Regenerate with `composer dump-autoload` from this directory; never run `composer install` on the deploy path (vendor/ is committed and shipped).",
"type": "project",
"license": "AGPL-3.0-or-later",
"require": {
"php": ">=8.1",
"gemorroj/m3u-parser": "6.0.1",
"chrisyue/php-m3u8": "^4",
"mobiledetect/mobiledetectlib": "^4.9",
"geoip2/geoip2": "~3.0"
},
"require-dev": {
"phpstan/phpstan": "2.2.8",
"friendsofphp/php-cs-fixer": "^3.95",
"tomasvotruba/unused-public": "^2.2"
},
"autoload": {
"psr-4": {
"XcVm\\": "./"
}
},
"config": {
"optimize-autoloader": false,
"classmap-authoritative": false,
"platform": {
"php": "8.1.33"
}
},
"scripts": {
"post-install-cmd": [
"@php -r \"fwrite(STDERR, \\\"[xc_vm] NOTE: vendor/ is committed and shipped. Use 'composer dump-autoload' to regenerate; do not run 'composer install' on the deploy path.\\n\\\");\""
],
"post-update-cmd": [
"@php -r \"fwrite(STDERR, \\\"[xc_vm] NOTE: vendor/ + composer.lock are committed. After changing deps, commit composer.lock and re-commit a PRODUCTION-only vendor: composer install --no-dev.\\n\\\");\""
]
}
}