static-analysis – Page 4 – Türker Yıldırım

The method that stopped overriding anything in 2019

Deep diveDecember 5, 202310 min read

#[Override] in 8.3, and what it asserts. A subclass method dead since a parent rename four years ago, with a bug report closed as not reproducible.

The interface with one implementation, and when that is fine

Deep diveNovember 16, 202310 min read

140 interfaces, 128 of them with exactly one implementation, and a jump-to-definition that always lands on the wrong file.

Mutation testing for one directory, and what it found

Deep diveOctober 24, 202310 min read

94% line coverage on the pricing code, and a bug that shipped anyway. A test that called the method and asserted it did not throw.

The any that took two hours to remove and was worth it

NoteOctober 17, 20231 min read

An any on a payload parameter, added in a hurry, propagating through nine functions before anything checked a property. any does not stay where it is put —…

A value object library, and the day it needed a serializer

Deep diveSeptember 20, 202310 min read

A Money type, an Email type, and thirty more, none of which can cross a boundary without being unwrapped by hand.

A JSON column that had become a schema

Deep diveSeptember 20, 20239 min read

A settings column with forty keys, four of which are queried, and a WHERE on a JSON path scanning two million rows.

Layer rules that finally matched the folders

NoteJune 8, 20232 min read

A layered architecture documented in a diagram from 2019 and enforced by nothing, with 88 violations by the time anybody checked. The baseline is what makes this adoptable:…

Two years of deprecations, and the upgrade we could no longer defer

Deep diveJune 6, 202314 min read

PHP 8.0 reaches end of life in November and the application is on it. 4,100 deprecation notices, and a log filter that had been hiding them.

TypeScript 5, and the decorators we had been faking

Deep diveApril 21, 20239 min read

5.0 in March, decorators that are the standard proposal rather than the old flag, and a build nobody could explain.

A container we replaced with four functions

Deep diveApril 12, 20238 min read

A package with a dependency injection container, for eleven services, spending 90 ms compiling on a request that does 12 ms of work.