Replace composer-unused and composer-require-checker with composer-dependency-analyzer

Author: tvdijen

.github/workflows/php.yml

@@ -184,7 +184,7 @@ jobs:
         with:
           # Should be the higest supported version, so we can use the newest tools
           php-version: '8.5'
-          tools: composer, composer-require-checker, composer-unused
+          tools: composer, composer-dependency-analyser
           extensions: ctype, date, dom, filter, intl, libxml, pcre, sodium, spl, xml
           coverage: none
 
@@ -218,11 +218,8 @@ jobs:
       - name: Install Composer dependencies
         run: composer install --no-progress --prefer-dist --optimize-autoloader
 
-      - name: Check code for hard dependencies missing in composer.json
-        run: composer-require-checker check --config-file=tools/composer-require-checker.json composer.json
-
-      - name: Check code for unused dependencies in composer.json
-        run: composer-unused --excludePackage=simplesamlphp/composer-xmlprovider-installer
+      - name: Check code for missing or unused dependencies
+        run: composer-dependency-analyser
 
       - name: PHP Code Sniffer
         run: vendor/bin/phpcs

composer.json

@@ -38,7 +38,6 @@
         "ext-bcmath": "*",
         "ext-date": "*",
         "ext-dom": "*",
-        "ext-filter": "*",
         "ext-libxml": "*",
         "ext-pcre": "*",
         "ext-spl": "*",
@@ -49,7 +48,10 @@
         "simplesamlphp/composer-xmlprovider-installer": "~1.3"
     },
     "require-dev": {
-        "simplesamlphp/simplesamlphp-test-framework": "~2.0"
+        "ext-mbstring": "*",
+
+        "phpunit/phpunit": "^13.3",
+        "simplesamlphp/simplesamlphp-test-framework": "dev-release-2.x"
     },
     "support": {
         "issues": "https://github.com/simplesamlphp/xml-common/issues",

tools/composer-dependency-analyser.php

@@ -0,0 +1,16 @@
+<?php
+
+declare(strict_types=1);
+
+use ShipMonk\ComposerDependencyAnalyser\Config\Configuration;
+use ShipMonk\ComposerDependencyAnalyser\Config\ErrorType;
+
+return (new Configuration())
+    // Constant from libxml (or a polyfill / conditional define); not a real class
+    ->ignoreUnknownClasses([
+        'LIBXML_NO_XXE',
+    ])
+
+    // Composer plugin – never referenced from PHP source
+    ->ignoreErrorsOnPackage(
+        'simplesamlphp/composer-xmlprovider-installer',