Playground
Change the code. See what stays between requests.
Worker Safety 1.1.0 runs locally with PHP WebAssembly. Your code is parsed, never executed or uploaded.Add a PHP file
Up to 5 PHP files · 100 KB total. Edits stay only in this page; reloading clears them.
Ready when you are. Choose Analyze to load the engine.
First run downloads a PHP runtime (about 18 MB uncompressed) and the analyzer (about 3.5 MB). Downloads are cached by your browser. Analysis stops after 30 seconds; initial loading allows 90 seconds.
What this playground checks
Section titled “What this playground checks”The real Worker Safety 1.1.0 scanner analyzes the PHP files above, including cross-file relationships. All four analysis targets are selected: FrankenPHP, Octane, RoadRunner and Swoole. They are not detected deployments. The HIGH failure threshold matches the CLI default; MEDIUM findings still deserve review.
Laravel context supplies Composer metadata for framework detection. It does not install or boot Laravel. The engine does not execute your PHP, install dependencies, fetch repositories, or replay requests. Only the supplied files are available, so this small example cannot replace a scan of your full application.
Static analysis only — no replay here
Section titled “Static analysis only — no replay here”This playground runs static analysis and nothing else. Runtime replay is a different kind of check: it sends real HTTP requests to a persistent worker you are running and observes whether a later request can see an earlier one’s state. That needs a running single-worker application and a real network round trip, so it cannot happen in a browser tab and is not simulated here.
The bundled static-analysis engine is 1.1.0. The package also offers runtime replay since 1.2.0, available from the command line only. The Playground does not send HTTP requests to your application or run replay scenarios.
Before and after
Section titled “Before and after”Your edits are kept separately for each scenario and version while this page is open. Choose After / reviewed, then analyze again to compare. For the factory example, the alternative demonstrates an intentional suppression; it does not prove that every memoized value is safe. A suppression can continue applying after assigning code changes.
Privacy and compatibility
Section titled “Privacy and compatibility”Source files remain in browser memory and are discarded when the page is closed or reloaded. The page downloads the engine from this site; it does not send source code to an analysis server. Use a current browser with WebAssembly enabled. Low-memory devices or restricted browsers may be unable to load the engine; the local CLI remains available.
Powered by PHP WebAssembly from WordPress Playground. See third-party notices and source information. Worker Safety and its production dependency sources and licenses are included in the downloadable engine bundle.