PHPRegex Laravel

Laravel integration for PHPRegex: the Regex service and facade, and the regex:lint, regex:routes, regex:explain, regex:compare and regex:transpile commands.

Requires PHP 8.2+, Laravel 12.

Features

• A Regex service and a Regex facade, registered by package discovery on install
• Five artisan commands: regex:lint, regex:routes, regex:explain, regex:compare and regex:transpile
• regex:lint reads your PHP files, your route constraints and your validator rules in one pass
• Reports in console, JSON, GitHub, Checkstyle and JUnit formats, with clickable editor links
• regex:lint judges patterns for the PHP your composer.json supports, not for the one running it

Installation

composer require php-regex/regex-laravel

Package discovery registers PHPRegexServiceProvider and the Regex alias — nothing to add to config/app.php. The config file is optional; publish it to edit defaults:

php artisan vendor:publish --tag=php-regex-config

Configuration

Every option lives in config/php-regex.php; unpublished keys take the package default, section by section.

Usage

use PHPRegex\Laravel\Facades\Regex;

Regex::validate('/^[a-z0-9-]{3,}$/')->isValid; // true

$invalid = Regex::validate('/^(unclosed/');

$invalid->error; // "Expected ) at end of input (found eof)"
echo $invalid->caretSnippet;
// Line 1: ^(unclosed
//                   ^

Explain a pattern in plain English:

echo Regex::explain('/^\d{4}$/');
// Regex matches
//   Anchor: the beginning of a line
//     Character Type: A digit: [0-9] (exactly 4 times)
//   Anchor: the end of a line

Check one for ReDoS:

$analysis = Regex::redos('/^(a+)+$/');

$analysis->isSafe();                  // false
$analysis->severity->value;           // 'critical'
$analysis->getVulnerableSubpattern(); // 'a+'
$analysis->headline();                // 'Exponential backtracking (proven)'
$analysis->witness->render();         // '"a" x n . "!"', the input that triggers it

Or transpile it for another engine:

$result = Regex::transpile('/^[a-z]+(?=\d)$/i', 'javascript');

$result->constructor; // 'new RegExp("^[a-z]+(?=\\d)$", "i")'

The facade also exposes parse, parseTolerant, analyze, optimize, highlight, literals, generate and parsePattern.

Artisan commands

php artisan regex:lint
php artisan regex:lint app/ tests/ --format=json
php artisan regex:routes --validate

Exit codes: 0 when nothing is wrong, 1 when the judged patterns or files have a problem, 2 when an option or the configuration cannot be used.

Documentation

• The Laravel guide — configuration, lint targets, the commands, upgrading from 1.x
• Quick start — first steps with the Regex service
• The ReDoS guide — how the risk analysis reaches its verdicts
• Backward compatibility promise — what stays stable across releases

Resources

• Documentation
• The runtime library behind the facade: regex-toolkit
• Changelog
• Report issues and send pull requests in the main PHPRegex repository

Sponsors

If PHPRegex saves you time, consider sponsoring its maintenance.

License

MIT. See LICENSE.