Issues

• The contract recursion guard is global: it covers all objects and all fibers

  documentation
  php-deal/framework#86 · Filter by author lisachenko opened on Nov 10, 2026

• [Security] Third-party Contract implementations can pass computed text to eval()

  documentationenhancement
  php-deal/framework#85 · Filter by author lisachenko opened on Nov 10, 2026

• The $this check for static methods is a regex that also matches string literals

  bug
  php-deal/framework#84 · Filter by author lisachenko opened on Nov 10, 2026

• Parameters named $__result or $__old are silently shadowed in contracts

  bug
  php-deal/framework#83 · Filter by author lisachenko opened on Nov 10, 2026

• $__old is a shallow clone and runs the class's __clone()

  documentationenhancement
  php-deal/framework#82 · Filter by author lisachenko opened on Nov 10, 2026

• [Performance] Compiled contracts and attributes are rebuilt on every PHP-FPM request

  enhancement
  php-deal/framework#81 · Filter by author lisachenko opened on Nov 10, 2026

• [Performance] Cache per-call reflection and string work in the aspects

  enhancement
  php-deal/framework#80 · Filter by author lisachenko opened on Nov 10, 2026

• README Symfony example always turns Go! AOP debug mode off

  bugdocumentation
  php-deal/framework#79 · Filter by author lisachenko opened on Nov 10, 2026

• [Security] Violation messages leak #[\SensitiveParameter] values and assertion messages

  bug
  php-deal/framework#78 · Filter by author lisachenko opened on Nov 10, 2026

• [Security] A parent's contract is skipped when a child declares the same expression text

  bug
  php-deal/framework#77 · Filter by author lisachenko opened on Nov 10, 2026

• Compile contract expressions into closures at weaving time instead of eval()

  enhancement
  php-deal/framework#76 · Filter by author lisachenko opened on Nov 10, 2026