phpactor 2026.10.07.0-1
seededverified· maintained by jneidel· MIT
PHP completion, refactoring, introspection tool and language server
shelly install aur phpactor --aur-url https://atoll.seafoam-labs.org
This can be permanently set in the shelly
config.json file.
git clone https://atoll.seafoam-labs.org/packages/phpactor.git
Served Git SHAs are synthesized by Atoll when it commits stored revisions - they do not match
upstream AUR.
/v1/packages/phpactor/versions SHAs are authoritative.
Metadata
Relations
Depends
Make dependencies
Optional dependencies
Provides
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| 8e15a2cbaaf5head | verified | 2026-11-05 16:18 | 2 |
| 3c5784d64e9d | verified | 2026-11-05 16:09 | 2 |
Head findings
medium
risky-tool
in
PKGBUILD'php' is invoked - this fetches/executes external code outside alpm's control.
if ! php -m | grep iconv >/dev/null; then
medium
risky-tool
in
PKGBUILD'composer' is invoked - this fetches/executes external code outside alpm's control.
composer install --no-interaction --no-dev --optimize-autoloader --working-dir "$LIB_DIRECTORY"
Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.