Audit
Audit Baseline Ratchet
homeboy.json carries a permanent suppression list for homeboy audit at baselines.audit.known_fingerprints. This document explains what is in it, why it...
Policy-flow detector
The policy-flow detector reports an aggregate transformation that drops declared policy state before downstream code independently branches over the same...
Dead Guard Detection
Homeboy audit flags function_exists('…'), class_exists('…'), and defined('…') guards whose checked symbol is guaranteed to exist at runtime. Such guards are...
Repeated literal-shape detector
Detects inline associative array literals that appear many times with the same shape (ordered keys + value kinds) across a...
Shared scaffolding detector
Finds groups of classes in the same directory subtree that share the same overall method-shape (same method names, visibilities, and...
Audit Deprecation Age
Homeboy audit flags @deprecated X.Y.Z docblock tags that are significantly older than the component's current version. This surfaces ancient deprecations...