I built an offline CLI that audits a legacy PHP app in one command — and shows you the fix

Every time I inherit a legacy PHP app — a CodeIgniter admin panel, an old Laravel service, a WordPress site someone's cousin built — day one is the same ritual: grep for password, squint at config.php, wonder if display_errors is on in prod, and hope there isn't a hardcoded API key waiting to ruin my week.

So I built a tool to do that first pass for me, in one command, offline. It's called Observer, it's a single Go binary, and it's free and MIT.

observer analyze ./your-app --out report.html

Enter fullscreen mode

Exit fullscreen mode