Skip to content

v2.7.3

Choose a tag to compare

@ahmed-bhs ahmed-bhs released this 12 Mar 14:37
· 331 commits to main since this release

Added

  • New OverprivilegedDatabaseUserAnalyzer: detects privileged, empty, or passwordless database users and suggests switching to a least-privilege account.
  • New HardcodedDatabaseCredentialsAnalyzer: detects database credentials embedded directly in DBAL configuration and suggests moving them to environment variables.
  • Repeated lookup detection in NPlusOneAnalyzer: identifies repeated findBy()/findOneBy()-style lookups on non-key columns and suggests batching with IN queries or request-level caching.

Changed

  • SensitiveDataExposureAnalyzer: now also flags public getters that expose sensitive entity fields without explicit protection.
  • PropertyTypeMismatchAnalyzer: now attaches concrete fix suggestions for PHP/Doctrine type mismatches, including nullability mismatches.
  • CollectionInitializationAnalyzer suggestion template now uses the actual mappedBy value when available.