What are the best php code scanning tools to check for security vulnerabilities and general php issues?

4 posts were split to a new topic: Declare(strict_types=1) vs error_reporting(-1)