Simon Mönch

For deptrac I decided to use only GPG itself. It works fine with phive/phar.io. Just add your public key to a keyserver and add the signature to github releases.

phar.io has a wrapper library for GnuPG https://packagist.org/packages/phar-io/gnupg. Might be interesting/reusable.

@greg0ire I would recommend you to build the phar only for the minimum php target version as this phar file will be used for a release.

@MarvinKlemp #117 has been merged. This issue could be closed, right?

Hi @marcelthole, sorry for the late response I had to think about it. I came up with a prove of concept which shows how to track method calls as dependencies....

@marcelthole I could get it working with BetterReflection for a test case https://github.com/qossmic/deptrac/pull/454/files#diff-8b480c9e118ef628179df6eb018a9967a99a42b7a0104f734c2253ed539e88ccR133

Well, there is an open POC/PR https://github.com/qossmic/deptrac/pull/454 for it but needs a rebase. Feel free to take over :-)

PHP's file function returns an array starting with `0`. The keys needs to be incremented by `1` then.

Just one minor improvement could be: removing the `is_file` [here](https://github.com/qossmic/deptrac/blob/main/src/Supportive/File/FileReader.php#L16), at least for the [parser](https://github.com/qossmic/deptrac/blob/main/src/Core/Ast/Parser/NikicPhpParser/NikicPhpParser.php#L57). As far as I remember we are passing the parser only "valid" files and the...