What static analysis tools do you use?

PHPStan and Psalm primarily. We start at level 8 and report how many violations exist at each level down to the level your code currently passes. The number gives you a quantitative bar to improve against.

Do you write tests as part of the audit?

No. The audit measures coverage and identifies gaps. Writing tests is a separate engagement. Knowing where coverage is missing is more valuable than partial new coverage.

What is the tech-debt score?

A composite of cyclomatic complexity, dependency depth, test coverage and rule violations. Each module gets a score; the report orders them by debt-to-business-value so you fix the worst-payoff modules first.

Can you handle a large monorepo?

Yes, with a longer fixed quote. We run the static analysis incrementally and present the report module by module. Architectural review at the inter-module boundary is included.

Do you cover frontend code?

Yes for theme code, JavaScript and TypeScript. Static analysis tools differ (ESLint and tsc instead of PHPStan) but the methodology and output format are the same.

Website Audits

Audit de Qualité de Code

Audit de la qualité du code sur votre codebase Magento ou e-commerce. Analyse statique, revue de modules personnalisés, couverture de tests, évaluation de la dette technique.

Turnaround: 5 to 10 days
Tools: PHPStan + Psalm
Output: Tech-debt roadmap
Walkthrough: 60 minutes

Overview

What it is.

Audit indépendant de la qualité du code sur les codebases Magento et e-commerce. Analyse statique (PHPStan, Psalm), revue de modules personnalisés par rapport aux modèles du framework, analyse de la couverture des tests automatisés, et un score de dette technique qui vous indique où se cache le fardeau de la maintenance. Le résultat est une feuille de route de remédiation que votre équipe peut suivre. La plupart des audits prennent entre 5 et 10 jours ouvrables selon la taille du dépôt. Les architectures multi-dépôts ou microservices reçoivent un devis fixe plus long.

What you get

Deliverables.

Static analysis run at the strictest level your code passes
Custom-module review against Magento framework patterns
Test coverage analysis with priority recommendations
Technical debt score per module with effort estimates
Dependency hygiene report (versions, vulnerabilities, abandoned packages)
Code style and PSR compliance check
Prioritised remediation roadmap
60-minute walkthrough call

Honest limits

What it isn't.

Audit is read-only; we do not refactor inside this scope
Architecture redesign is a separate engagement
We do not write tests as part of the audit; that is a separate engagement

Not sure if it's a fit? Email us. We'll tell you straight.

How it works

From inquiry to handover.

01
1. Brief
Repository access. Audit scope confirmed (full codebase vs specific modules).
02
2. Audit
Static analysis run. Module-by-module review. Findings catalogued.
03
3. Report + walkthrough
Roadmap delivered. 60-minute call with the engineer who ran the audit.

Frequently asked

Questions we get from people about to book.

What static analysis tools do you use?: PHPStan and Psalm primarily. We start at level 8 and report how many violations exist at each level down to the level your code currently passes. The number gives you a quantitative bar to improve against.
Do you write tests as part of the audit?: No. The audit measures coverage and identifies gaps. Writing tests is a separate engagement. Knowing where coverage is missing is more valuable than partial new coverage.
What is the tech-debt score?: A composite of cyclomatic complexity, dependency depth, test coverage and rule violations. Each module gets a score; the report orders them by debt-to-business-value so you fix the worst-payoff modules first.
Can you handle a large monorepo?: Yes, with a longer fixed quote. We run the static analysis incrementally and present the report module by module. Architectural review at the inter-module boundary is included.
Do you cover frontend code?: Yes for theme code, JavaScript and TypeScript. Static analysis tools differ (ESLint and tsc instead of PHPStan) but the methodology and output format are the same.

Ready to start?

Tell us about your project.

A member of our team reads every message. Replies within one business day. No sales call required.

See all services

Website Audits

Audit de Qualité de Code

Audit de la qualité du code sur votre codebase Magento ou e-commerce. Analyse statique, revue de modules personnalisés, couverture de tests, évaluation de la dette technique.

Turnaround: 5 to 10 days
Tools: PHPStan + Psalm
Output: Tech-debt roadmap
Walkthrough: 60 minutes

Overview

What it is.

What you get

Deliverables.

Static analysis run at the strictest level your code passes
Custom-module review against Magento framework patterns
Test coverage analysis with priority recommendations
Technical debt score per module with effort estimates
Dependency hygiene report (versions, vulnerabilities, abandoned packages)
Code style and PSR compliance check
Prioritised remediation roadmap
60-minute walkthrough call

Honest limits

What it isn't.

Audit is read-only; we do not refactor inside this scope
Architecture redesign is a separate engagement
We do not write tests as part of the audit; that is a separate engagement

Not sure if it's a fit? Email us. We'll tell you straight.

How it works

From inquiry to handover.

01
1. Brief
Repository access. Audit scope confirmed (full codebase vs specific modules).
02
2. Audit
Static analysis run. Module-by-module review. Findings catalogued.
03
3. Report + walkthrough
Roadmap delivered. 60-minute call with the engineer who ran the audit.

Frequently asked

Questions we get from people about to book.

What static analysis tools do you use?: PHPStan and Psalm primarily. We start at level 8 and report how many violations exist at each level down to the level your code currently passes. The number gives you a quantitative bar to improve against.
Do you write tests as part of the audit?: No. The audit measures coverage and identifies gaps. Writing tests is a separate engagement. Knowing where coverage is missing is more valuable than partial new coverage.
What is the tech-debt score?: A composite of cyclomatic complexity, dependency depth, test coverage and rule violations. Each module gets a score; the report orders them by debt-to-business-value so you fix the worst-payoff modules first.
Can you handle a large monorepo?: Yes, with a longer fixed quote. We run the static analysis incrementally and present the report module by module. Architectural review at the inter-module boundary is included.
Do you cover frontend code?: Yes for theme code, JavaScript and TypeScript. Static analysis tools differ (ESLint and tsc instead of PHPStan) but the methodology and output format are the same.

Ready to start?

Tell us about your project.

A member of our team reads every message. Replies within one business day. No sales call required.

See all services

Audit de Qualité de Code

What it is.

Deliverables.

What it isn't.

From inquiry to handover.

1. Brief

2. Audit

3. Report + walkthrough

Questions we get from people about to book.

Tell us about your project.

Audit de Qualité de Code

What it is.

Deliverables.

What it isn't.

From inquiry to handover.

1. Brief

2. Audit

3. Report + walkthrough

Questions we get from people about to book.

Tell us about your project.