mirror of
https://github.com/Vateron-Media/XC_VM.git
synced 2026-10-24 12:03:17 +02:00
Adds a `make phpstan-deadcode` target and build/phpstan-deadcode.neon that layer tomasvotruba/unused-public on top of the main PHPStan setup to report unused PUBLIC methods/properties/constants. It is an on-demand audit, NOT a CI gate (expect false positives for dynamically-invoked code — routes, #[ListensTo] subscribers, CLI handlers, view templates). unused-public is a require-dev package (installed by `make dev-tools`); the committed vendor/ stays production-only.
39 lines
1.4 KiB
JSON
39 lines
1.4 KiB
JSON
{
|
|
"name": "vateron-media/xc-vm",
|
|
"description": "XC_VM IPTV panel — Composer autoloader (PSR-4) deployed as /home/xc_vm/. Regenerate with `composer dump-autoload` from this directory; never run `composer install` on the deploy path (vendor/ is committed and shipped).",
|
|
"type": "project",
|
|
"license": "AGPL-3.0-or-later",
|
|
"require": {
|
|
"php": ">=8.1",
|
|
"gemorroj/m3u-parser": "6.0.1",
|
|
"chrisyue/php-m3u8": "^4",
|
|
"mobiledetect/mobiledetectlib": "^4.9",
|
|
"geoip2/geoip2": "~3.0"
|
|
},
|
|
"require-dev": {
|
|
"phpstan/phpstan": "2.2.8",
|
|
"friendsofphp/php-cs-fixer": "^3.95",
|
|
"tomasvotruba/unused-public": "^2.2"
|
|
},
|
|
"autoload": {
|
|
"psr-4": {
|
|
"XcVm\\": "./"
|
|
}
|
|
},
|
|
"config": {
|
|
"optimize-autoloader": false,
|
|
"classmap-authoritative": false,
|
|
"platform": {
|
|
"php": "8.1.33"
|
|
}
|
|
},
|
|
"scripts": {
|
|
"post-install-cmd": [
|
|
"@php -r \"fwrite(STDERR, \\\"[xc_vm] NOTE: vendor/ is committed and shipped. Use 'composer dump-autoload' to regenerate; do not run 'composer install' on the deploy path.\\n\\\");\""
|
|
],
|
|
"post-update-cmd": [
|
|
"@php -r \"fwrite(STDERR, \\\"[xc_vm] NOTE: vendor/ + composer.lock are committed. After changing deps, commit composer.lock and re-commit a PRODUCTION-only vendor: composer install --no-dev.\\n\\\");\""
|
|
]
|
|
}
|
|
}
|