A curated reference of PHP tools, libraries, and self-contained applications worth knowing. Updated over time as good things surface.
The PHP advantage in 2026: Runs on shared hosting, no Docker required, no root access needed. A $5/month cPanel host can run most of these. That's still a superpower.
“Don't forget PHP” — it runs everywhere, needs nothing, and often outlasts the
framework of the week.
no external services, no dependencies — just files.
with O(1) lookup, field boosting, AND/OR filters.
Searches 10k docs in ~3–5ms median on shared Linux hosting.
composer require ols/php-ftsrename, delete, edit, zip/unzip. Drop it anywhere and it works.
listings with thumbnails, search, tree view.
local storage, FTP, S3. More full-featured than Tiny File Manager.
plugins, themes. Mature project, active community.
real user management.
Supports albums, sharing, EXIF data display.
Upload, albums, user accounts.
formats, adjust colors — clean fluent API wrapping GD and Imagick.
composer require intervention/imagestrong plugin ecosystem. Fast and portable.
commercial use but highly regarded.
get a website. Minimal, no admin panel.
text files. Strong plugin ecosystem, access control, revision history.
Lightweight, portable, actively maintained for 20+ years.
For simple sites, consider the flat-file options above first.
No-database option available. Very Unix-philosophy.
supports fever API (compatible with many RSS reader apps).
content. Encrypted client-side. Expiry options.
view, sync to e-readers.
Trilium Notes, Joplin Server.
tracking, API. The PHP gold standard for this.
attachments, DKIM signing. Replaces PHP's unreliable mail().
composer require phpmailer/phpmailerchained validators, good error messages.
composer require respect/validationUsed internally by many frameworks.
composer require nikic/fast-routeMuch lighter than Laravel/Symfony.
streaming, no full Symfony install needed.
composer require symfony/http-clientmiddleware, PSR-18 compatible.
composer require guzzlehttp/guzzlesyntax. Used by Symfony, Drupal, Grav, and many others.
composer require twig/twiginheritance, escaping. Feels like PHP, not a DSL.
by design, context-aware escaping.
multiple driver support. Without the full ORM weight.
composer require doctrine/dbalsupports MySQL, PostgreSQL, SQLite, and more.
during development. Freeze mode for production.
patterns, tooling, and when SQLite beats MySQL for PHP apps.
progress bars, tables. Standalone Symfony component.
composer require symfony/consoleecho.Configurable strictness levels.
composer require –dev phpstan/phpstansecurity analysis, taint tracking.
composer require –dev vimeo/psalmand custom rules.
composer require –dev friendsofphp/php-cs-fixermocking, coverage reports.
composer require –dev phpunit/phpunitFluent expectations, cleaner syntax.
composer require –dev pestphp/pestlog viewer, request data. Browser extension + PHP library.
composer require –dev itsgoingd/clockworkcode coverage. Integrates with VS Code, PhpStorm.
subscriber notifications.
error trackers like Flare.
video calls, and a large app ecosystem.
rules, time tracking. No-frills, no database required (SQLite default).
accessories. Laravel-based.
client portal. Laravel-based.
(not PHP), and what PHP can/can't do here with WebSockets.
longer and deploy anywhere.
tool requires Docker or root, note it.
tools are portable, backup-friendly, and Git-compatible.
half of Symfony for one feature is a different beast than a focused library.
in DokuWiki format, ready to paste in.