It looks like there is no licence specified for this software, so people who might wish to use it don't have explicit permission to do so.

Please consider adding an open source / free software licence.

Under one of the directories included in the scanDirectories setting, if a PHP file returning an array contains a use of ::class, usage of the referenced class will not be detected. In my case, the reference was Opauth\OpenID\Strategy\OpenID::class and the associated library was opauth/openid.

It would be nice if the scanner was able to log instances of usage that it found per dependency (i.e. the name of the dependency and paths to the source files that use it) so that dependencies with minimal usage could be removed or replaced.

Php version:

PHP 7.2.5-1+ubuntu16.04.1+deb.sury.org+1

Os:

ubuntu16.04.1

Composer packages with detection troubles:

hyn/multi-tenant

Which type of autoload it uses?

PSR4

When adding the package, scanner starts complaining:

Unused dependencies found!
 -php

I have following code and scanner still reports matthiasmullie/minify is not used.
If I replace use with use MatthiasMullie\Minify\JS and call with new JS then problem gone.
But IMO this still should be fixed as example is valid php code.

<?php

declare(strict_types=1);

namespace Sp\Minifier;

use MatthiasMullie\Minify;

class MinifyJSMinifier implements MinifierInterface
{
    public function minify(string $pathFrom, string $pathTo)
    {
        $minifier = new Minify\JS($pathFrom);
        $minifier->minify($pathTo);
    }
}

Php version:

7.2

Os:

Docker on Mac

Composer packages with detection troubles:

ramsey/uuid

Code example of package classes usage that not detected:

The package is a suggested package by one library I use. since it is not require composer won't install it. I have installed it using composer require, but then I am not using it on my project directly. I tried adding it as such:

    'skipPackages' => [
        'ramsey/uuid',
    ],

on my config, but it is still reporting it as unused. is this how it is supposed to work? or is there any other way to configure it.

Php version: 7.1.14

Os: MacOS High Sierra

Composer packages with detection troubles:

Which type of autoload it uses?

Code example of package classes usage that not detected:

unused_scanner /path/to/configuration/file/scanner_config.php --silent
PHP Warning: require_once(/path/to/configuration/file/scanner_config.php): failed to open stream: No such file or directory in /Users/enz/.composer/vendor/insolita/unused-scanner/Lib/Runner.php on line 86
PHP Fatal error: require_once(): Failed opening required '/path/to/configuration/file/scanner_config.php' (include_path='.:') in /Users/enz/.composer/vendor/insolita/unused-scanner/Lib/Runner.php on line 86

One of the dependencies of my project is datadog/php-datadogstatsd. This library uses a classmap autoloader and references a directory containing a single class file that does not include a namespace directive.

Under one of the directories included in the scanDirectories setting, I have a class that extends from this library's class. This class usage is not detected.

rel to #36

https://travis-ci.org/Insolita/unused-scanner/jobs/597326932

Need to ensure that new composer release will be supported

hi there,

my apologies in case I am totally wrong here.
i am using this package with version with "^1.3" inside my composer.json with PHP 5.6.9 as fixed PHP version. (yeah i know, super old).
i was wondering, why composer now takes minutes instead of seconds when just using composer with -h - so with nothing.
turned out, that this package uses nesbot/carbon (>=1.22) and this package requires kylekatarnls/update-helper (^1.1).
and the helper is scanning all my files, while composer <= 2.0.8 is not.

i don´t know what really causes that behavior, but in case it has something to do with this package i wanted to let you know.

thanks !

composer/composer#9760

1. outputs only first dir from defined $scanDirectories
2. scans very very fast (no files I guess?)
3. always says Unused dependencies not found!

I tried to use DIRECTECTORY_SEPARATOR in config with no luck. Same config works good on linux.

SQLSTATE[42601]: Syntax error: 7 ERROR: syntax error at or near "FROM"
LINE 1: SHOW INDEX FROM table

Php version: 7.0

Maintaining old code base with php 7.0, would be great to use this tool if backward compatibility is not too hard.

Please, create new release (latest release does not contains a4e01b1 ), so it can be used with composer

Would it be possible to make the parameter for the config file optional? Meaning that if the standard 'scanner_config.php' is present in the projects' root, allowing the tool to run without the config parameter. If the config filename is different, then of course it can still be used with the parameter.

Not a big request, but saves some typing :)

Cheers! Sacha

Php version: 7.2

Os: Debian Stretch

Composer packages with detection troubles: any that are used only in Symfony .yml definitions

Which type of autoload it uses? -

Code example of package classes usage that not detected: -

E.g. if the only reference to willdurand/geocoder-bundle is - '@bazinga_geocoder.geocoder' as a DI argument for a service and in my service I construct it with a class from a different package as I have to (use Geocoder\ProviderAggregator;), it's not detected.

Parse error: syntax error, unexpected '?'

Php version: 7.2.7 on Laravel 5.7.19

Os: Win10 x64

Composer packages with detection troubles: all

I tried to test unused-scanner on my Laravel project. Following the manual, I've installed scanner via composer, created scanner_config.php in root directory and...

It does not work. After preparing stage (less than a second), scanner takes first directory from $scanDirectories array, returns "No unused depedencies found" and quits.

D:\htest\test>unused_scanner scanner_config.php

• config prepared

• search patterns prepared

• Scan D:\htest\test\app
  100%[============================================================>]
  No unused dependencies found!

My scanner_config.php:

<?php $projectPath = __DIR__ ; //Declare directories which contains php code $scanDirectories = [ $projectPath . '/app/', $projectPath . '/config/', $projectPath . '/resources/views/', $projectPath. '/routes/' ]; //Optionally declare standalone files $scanFiles = [ $projectPath . '/AuthenticatesUsers.php', ]; return [ 'composerJsonPath' => $projectPath . '/composer.json', 'vendorPath' => $projectPath . '/vendor/', 'scanDirectories' => $scanDirectories, 'scanFiles'=>$scanFiles ];

Symfony 5 was just released. Is it possible to allow Symfony 5 in composer.json?

Do you have any plans to distribute this project as phar? Having to composer install it globally or on project scope might introduce dependency conflicts. Also, installing this project as a phar would simplify the install process.

Many other similar projects do recommend that they are installed as phar - Composer Require Checker, Symfony Security Checker, Infection, etc.

I'd be happy to contribute if you think this would be something you are willing to accept.

Php version:7.4

Os:Ubuntu 20.04 LTS

I followed the instructions mentioned in the read me file but it did not work and gave me the command not found.

In case a configuration file is used with an entry in scanDirectories that points to a directory that does not exist an error is returned.

I believe this happens because relpath returns false after which DIRECTORY_SEPARATOR is appended here:

Is it somehow possible to support Laravels autodicovery feature?

I tried to dig into Laravel to find the relevant code but I only found the place where the extra gets loaded, not where it's actually stored.

Php version:

8.0 (but doesn't really matter)

Os:

macOS / Ubunutu / Alpine

Composer packages with detection troubles:

All Laravel autodiscovered packages, e.g. https://github.com/spatie/laravel-json-api-paginate

Which type of autoload it uses?

Autodiscovery via the package's composer.json extra.
See: https://laravelpackage.com/03-service-providers.html#autoloading

composer.json of the package that is not detected:

{
  ...,

  "autoload": { ... },

  "extra": {
      "laravel": {
          "providers": [
              "JohnDoe\\BlogPackage\\BlogPackageServiceProvider"
          ]
      }
  }
}

Code example of package classes usage that not detected:

The methods are magically injected, you call the package methods on your own models without any use.

YourModel::jsonPaginate();

See: https://github.com/spatie/laravel-json-api-paginate#usage