phpcpd-next

What phpcpd-next is

phpcpd-next is a token-based detector for copied and similar PHP code across a repository. It targets PHP 8.4 and later and is a successor to Sebastian Bergmann’s phpcpd. By default, it combines Rabin-Karp exact matching with TokenBag detection for reordered code; an optional unified engine checks for exact, renamed, gapped, and reordered clones. An optional orphan mode finds unreferenced classes, interfaces, traits, enums, and functions. Reports are available in the console and in PMD-CPD XML, JSON, or SARIF 2.1.0 formats. CI features include meaningful exit codes, result caching, and a per-file incremental index; clone findings return status 1. The project documents PHPUnit integration, a headless API, framework presets, and SARIF upload to GitHub Code Scanning. It is free and MIT-licensed, with no Composer runtime dependencies, but requires PHP 8.4 or later, ext-dom, and ext-mbstring. Installation options include Composer or building from source. The project cautions that advanced engines are research-grade and may produce more false positives than the default set.