php
3 guardrails, all at version v1.
| Guardrail | Default severity | What it checks |
|---|---|---|
php/dependencies-constrained | warning | Every package the manifest requires names a version constraint, rather than accepting whatever the registry serves. |
php/lockfile-committed | warning | The project commits composer.lock, so an install of the same commit resolves the same versions. |
php/version-declared | warning | The project declares the PHP version Composer resolves against, and that version is no older than the configured floor. |
Shared inputs
Every php guardrail declares these inputs, and each one may add its own.
| Input | Description | Default |
|---|---|---|
projectDir | Directory holding the project, relative to the directory the CLI runs in. | . |
Shared collectors
Every php guardrail is handed the facts these collectors gather, and each one may ask for more of its own.
| Collector | Gathers |
|---|---|
php | The Composer project in the project directory: the package it declares, the PHP version and extensions it asks for, the packages it requires and which of them are pinned, and whether the lock file is committed. |
Every guardrail in this category is configured the same way, in the guardrails.checks array of buildnote.json. See Configuring guardrails for every option, and Guardrails to search the whole library.