94% coverage, and a suite that passes with the logic inverted. Coverage measures execution rather than verification, and there is a tool that measures the difference.
An SDK that requires a concrete HTTP client propagates that choice to every consumer, and two SDKs requiring different majors of the same client cannot be installed together.…
The return expression is evaluated before finally runs, and the value is not handed to the caller until afterwards — so a finally that returns wins, silently. A…
Frameworks built on __call and facades produce hundreds of findings that are all the same false positive, and putting them in the baseline hides real errors of the…
Retrying a flaky upstream is a loop, a sleep, an attempt counter and a decision about which failures are retryable — four things that get written slightly differently…
A string transformation was a nest of function calls read from the inside out, and the order of arguments differed between them. Reading left to right in the…
Type-hinting iterable is the right choice for anything that consumes a sequence, and it makes two promises the caller has to honour. Accepting iterable is a promise to…
A service injected into a controller is constructed on every request that hits it, including the requests that never call it — and for an expensive constructor that…
One password, six services, and FLUSHALL available to all of them. 6.0 landed in April with users — and the keyspace pattern is where the isolation actually is.