php-lib-template #23

    if ($overrides !== null) {
        $environment = \array_merge((array) \getenv(), $overrides);
    }
    $process = \proc_open(

    
proc_open() is vulnerable to command injection attacks. Use the Symfony Process component instead.
    

                    
Time to fix: about 4 hours
                Read doc
                                    
                
                Open Issue
            
                 Permalink
         Copy Prompt
    

            

            

                                    Last edited Tue, 06 Oct 2026 13:29:26 +0000 by Fery Wardiyanto
                    
                            
        
    
        $command,
        [
            0 => ['pipe', 'r'],
            1 => ['pipe', 'w'],
            2 => ['pipe', 'w'],

    return true;
}
if (\realpath($_SERVER['SCRIPT_FILENAME'] ?? '') === __FILE__) {
    exit(main());

    
This line stops the execution flow, without explanation. If this is for debug, you should remove it. If this is to deal with an error, use exceptions instead.
    

                    
Time to fix: about 4 hours
                Read doc
                                    
                
                Open Issue
            
                 Permalink
         Copy Prompt
    

            

            

                                    Last edited Tue, 06 Oct 2026 12:00:25 +0000 by Fery Wardiyanto
                    
                            
        
    
}

        $path = $file->getPathname();
        $relative = \str_replace('\\', '/', \ltrim(\substr($path, \strlen($root)), '/'));
        $skip = $path === __FILE__;
        foreach ($skipped as $directory) {
            if (\strpos('/' . $relative . '/', $directory) !== false) {

    
Consider replacing strpos() with str_contains() for improved readability.
    

                    
Time to fix: about 1 hour
                Read doc
                                    
                
                Open Issue
            
                 Permalink
         Copy Prompt
    

            

            

                                    Last edited Tue, 06 Oct 2026 13:29:26 +0000 by Fery Wardiyanto
                    
                            
        
    
                $skip = true;
                break;
            }
        }

            continue;
        }
        $content = \file_get_contents($path);
        if ($content === false || \strpos(\substr($content, 0, 8192), "\0") !== false) {

    
Consider replacing strpos() with str_contains() for improved readability.
    

                    
Time to fix: about 1 hour
                Read doc
                                    
                
                Open Issue
            
                 Permalink
         Copy Prompt
    

            

            

                                    Last edited Tue, 06 Oct 2026 13:29:26 +0000 by Fery Wardiyanto
                    
                            
        
    
            continue;
        }
        $visitor($relative, $content);
    }

        $root,
        $target,
        $patterns,
        &$changed
    ): void {
        if (\strpos($content, 'projek-xyz/') === false) {

    
Consider replacing strpos() with str_contains() for improved readability.
    

                    
Time to fix: about 1 hour
                Read doc
                                    
                
                Open Issue
            
                 Permalink
         Copy Prompt
    

            

            

                                    Last edited Tue, 06 Oct 2026 13:29:26 +0000 by Fery Wardiyanto
                    
                            
        
    
            return;
        }
        $replaced = \str_replace($patterns, $target, $content);

        }
    }
    $packageJson = \file_get_contents($root . '/package.json');
    if ($packageJson === false || \strpos($packageJson, '"version": "0.0.0"') === false) {

    
Consider replacing strpos() with str_contains() for improved readability.
    

                    
Time to fix: about 1 hour
                Read doc
                                    
                
                Open Issue
            
                 Permalink
         Copy Prompt
    

            

            

                                    Last edited Tue, 06 Oct 2026 13:29:26 +0000 by Fery Wardiyanto
                    
                            
        
    
        $failures[] = 'package.json version is not 0.0.0';
    }
    $attributes = \file_get_contents($root . '/.gitattributes');
    $totalEntries = $attributes === false ? 0 : \preg_match_all('/^.*export-ignore$/m', $attributes);

            string $content
        ) use (
            &$failures,
            $patterns
        ): void {
            if (\strpos($content, $patterns[0]) !== false || \strpos($content, $patterns[1]) !== false) {

    
Consider replacing strpos() with str_contains() for improved readability.
    

                    
Time to fix: about 1 hour
                Read doc
                                    
                
                Open Issue
            
                 Permalink
         Copy Prompt
    

            

            

                                    Last edited Tue, 06 Oct 2026 13:29:26 +0000 by Fery Wardiyanto
                    
                            
        
    
                $failures[] = 'residual template reference in ' . $relative;
            }
        });
    }

            string $content
        ) use (
            &$failures,
            $patterns
        ): void {
            if (\strpos($content, $patterns[0]) !== false || \strpos($content, $patterns[1]) !== false) {

    
Consider replacing strpos() with str_contains() for improved readability.
    

                    
Time to fix: about 1 hour
                Read doc
                                    
                
                Open Issue
            
                 Permalink
         Copy Prompt
    

            

            

                                    Last edited Tue, 06 Oct 2026 13:29:26 +0000 by Fery Wardiyanto
                    
                            
        
    
                $failures[] = 'residual template reference in ' . $relative;
            }
        });
    }