ShieldCI vs Larastan
Larastan and ShieldCI do different jobs. Run both.
Larastan extends PHPStan so it understands Eloquent, facades and the rest of Laravel's magic, and finds type errors and bugs in your code. ShieldCI looks at what types cannot show: security holes, slow queries, risky production configuration and vulnerable dependencies. ShieldCI even runs Larastan for its own PHPStan check, so this is not an either-or choice.
Side by side
ShieldCI and Larastan compared
| Feature | ShieldCI | Larastan |
|---|---|---|
| Type errors and undefined methods | One analyzer, level 5 by default | |
| Strictness levels you control | Levels 0 to 10, default 5 | Levels 0 to 10 |
| Security vulnerabilities (SQL injection, XSS, mass assignment) | — | |
| Production configuration (debug mode, app key, cookies, headers) | — | |
| Performance (N+1 queries, caching, OPcache) | — | |
| Vulnerable Composer and npm dependencies | — | |
| Hosted dashboard | From $9/mo | — |
| Team members and issue-tracker sync | Business plan | — |
| Price | Free package, paid plans from $9/mo | Free |
FAQ
Frequently asked questions
Close the loop on every finding.
Install the open-source package in minutes. Add the cloud dashboard for team assignments, ticket sync, and shareable reports.
or install the free package