What static analysis tools do you use?

PHPStan and Psalm primarily. We start at level 8 and report how many violations exist at each level down to the level your code currently passes. The number gives you a quantitative bar to improve against.

Do you write tests as part of the audit?

No. The audit measures coverage and identifies gaps. Writing tests is a separate engagement. Knowing where coverage is missing is more valuable than partial new coverage.

What is the tech-debt score?

A composite of cyclomatic complexity, dependency depth, test coverage and rule violations. Each module gets a score; the report orders them by debt-to-business-value so you fix the worst-payoff modules first.

Can you handle a large monorepo?

Yes, with a longer fixed quote. We run the static analysis incrementally and present the report module by module. Architectural review at the inter-module boundary is included.

Do you cover frontend code?

Yes for theme code, JavaScript and TypeScript. Static analysis tools differ (ESLint and tsc instead of PHPStan) but the methodology and output format are the same.

Website Audits

Code-Qualitätsprüfung

Code-Qualitätsprüfung für Ihre Magento- oder E-Commerce-Codebasis. Statische Analyse, Überprüfung von benutzerdefinierten Modulen, Testabdeckung, Bewertung technischer Schulden.

Turnaround: 5 to 10 days
Tools: PHPStan + Psalm
Output: Tech-debt roadmap
Walkthrough: 60 minutes

Overview

What it is.

Unabhängige Code-Qualitätsprüfung für Magento- und E-Commerce-Codebasen. Statische Analyse (PHPStan, Psalm), Überprüfung von benutzerdefinierten Modulen im Vergleich zu Framework-Mustern, automatisierte Analyse der Testabdeckung und eine Bewertung technischer Schulden, die Ihnen zeigt, wo die Wartungsbelastung verborgen ist. Das Ergebnis ist ein Sanierungsfahrplan, an dem Ihr Team arbeiten kann. Die meisten Prüfungen dauern je nach Repository-Größe 5 bis 10 Arbeitstage. Multi-Repo- oder Microservice-Architekturen erhalten ein längeres Festangebot.

What you get

Deliverables.

Static analysis run at the strictest level your code passes
Custom-module review against Magento framework patterns
Test coverage analysis with priority recommendations
Technical debt score per module with effort estimates
Dependency hygiene report (versions, vulnerabilities, abandoned packages)
Code style and PSR compliance check
Prioritised remediation roadmap
60-minute walkthrough call

Honest limits

What it isn't.

Audit is read-only; we do not refactor inside this scope
Architecture redesign is a separate engagement
We do not write tests as part of the audit; that is a separate engagement

Not sure if it's a fit? Email us. We'll tell you straight.

How it works

From inquiry to handover.

01
1. Brief
Repository access. Audit scope confirmed (full codebase vs specific modules).
02
2. Audit
Static analysis run. Module-by-module review. Findings catalogued.
03
3. Report + walkthrough
Roadmap delivered. 60-minute call with the engineer who ran the audit.

Frequently asked

Questions we get from people about to book.

What static analysis tools do you use?: PHPStan and Psalm primarily. We start at level 8 and report how many violations exist at each level down to the level your code currently passes. The number gives you a quantitative bar to improve against.
Do you write tests as part of the audit?: No. The audit measures coverage and identifies gaps. Writing tests is a separate engagement. Knowing where coverage is missing is more valuable than partial new coverage.
What is the tech-debt score?: A composite of cyclomatic complexity, dependency depth, test coverage and rule violations. Each module gets a score; the report orders them by debt-to-business-value so you fix the worst-payoff modules first.
Can you handle a large monorepo?: Yes, with a longer fixed quote. We run the static analysis incrementally and present the report module by module. Architectural review at the inter-module boundary is included.
Do you cover frontend code?: Yes for theme code, JavaScript and TypeScript. Static analysis tools differ (ESLint and tsc instead of PHPStan) but the methodology and output format are the same.

Ready to start?

Tell us about your project.

A member of our team reads every message. Replies within one business day. No sales call required.

See all services

Website Audits

Code-Qualitätsprüfung

Code-Qualitätsprüfung für Ihre Magento- oder E-Commerce-Codebasis. Statische Analyse, Überprüfung von benutzerdefinierten Modulen, Testabdeckung, Bewertung technischer Schulden.

Turnaround: 5 to 10 days
Tools: PHPStan + Psalm
Output: Tech-debt roadmap
Walkthrough: 60 minutes

Overview

What it is.

What you get

Deliverables.

Static analysis run at the strictest level your code passes
Custom-module review against Magento framework patterns
Test coverage analysis with priority recommendations
Technical debt score per module with effort estimates
Dependency hygiene report (versions, vulnerabilities, abandoned packages)
Code style and PSR compliance check
Prioritised remediation roadmap
60-minute walkthrough call

Honest limits

What it isn't.

Audit is read-only; we do not refactor inside this scope
Architecture redesign is a separate engagement
We do not write tests as part of the audit; that is a separate engagement

Not sure if it's a fit? Email us. We'll tell you straight.

How it works

From inquiry to handover.

01
1. Brief
Repository access. Audit scope confirmed (full codebase vs specific modules).
02
2. Audit
Static analysis run. Module-by-module review. Findings catalogued.
03
3. Report + walkthrough
Roadmap delivered. 60-minute call with the engineer who ran the audit.

Frequently asked

Questions we get from people about to book.

What static analysis tools do you use?: PHPStan and Psalm primarily. We start at level 8 and report how many violations exist at each level down to the level your code currently passes. The number gives you a quantitative bar to improve against.
Do you write tests as part of the audit?: No. The audit measures coverage and identifies gaps. Writing tests is a separate engagement. Knowing where coverage is missing is more valuable than partial new coverage.
What is the tech-debt score?: A composite of cyclomatic complexity, dependency depth, test coverage and rule violations. Each module gets a score; the report orders them by debt-to-business-value so you fix the worst-payoff modules first.
Can you handle a large monorepo?: Yes, with a longer fixed quote. We run the static analysis incrementally and present the report module by module. Architectural review at the inter-module boundary is included.
Do you cover frontend code?: Yes for theme code, JavaScript and TypeScript. Static analysis tools differ (ESLint and tsc instead of PHPStan) but the methodology and output format are the same.

Ready to start?

Tell us about your project.

A member of our team reads every message. Replies within one business day. No sales call required.

See all services

Code-Qualitätsprüfung

What it is.

Deliverables.

What it isn't.

From inquiry to handover.

1. Brief

2. Audit

3. Report + walkthrough

Questions we get from people about to book.

Tell us about your project.

Code-Qualitätsprüfung

What it is.

Deliverables.

What it isn't.

From inquiry to handover.

1. Brief

2. Audit

3. Report + walkthrough

Questions we get from people about to book.

Tell us about your project.