[llbbl]

Closes #118

Summary

• Add Infection mutation testing as an informational PHP quality signal.
• Establish and document the 55.23% baseline while keeping mutation testing manual-only.
• Provide a manually dispatched workflow that uploads HTML and JSON mutation reports.

Changes

Mutation Testing

• infection.json5: Configure Infection for application PHP code, test exclusions, report output, and zero minimum thresholds during baseline evaluation.
• composer.json: Add Infection and the composer infection command.
• composer.lock: Lock Infection and its dependencies.

CI and Documentation

• .github/workflows/mutation.yml: Run Infection only through manual workflow_dispatch and upload both reports.
• .github/workflows/ci.yml: Keep the standard push and pull-request CI workflow free of mutation testing.
• docs/testing.md: Document setup, report interpretation, baseline score, and the manual-only workflow.

Test plan

• Infection: 909 covered mutants, 502 killed, 407 escaped, 55.23% MSI
• PHPUnit unit, integration, and websocket suites
• PHPStan
• PHP CS fixer check
• Composer and pnpm audits
• Vite build
• Playwright E2E suite

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	composer/​infection/​infection@​0.35.4.0

View full report