Most PHP code treats password hashing as an algorithm choice. You write password_hash($password, PASSWORD_BCRYPT) directly in your authentication code and you move on. It works until the day the recommendation changes, and by then the algorithm you picked is hardcoded in every place that touches a password.
"Clean Architecture framework" reads like an oxymoron. Clean Architecture is about independence from frameworks: the framework is a detail you keep at arm's length so your business code never depends on it. A framework, in the usual sense, is the opposite. It imposes its conventions, it lives in vendor/, and you depend on it by version. Someone raised this objection to me, and it is fair. So which one is Phexium?
You open a test file you wrote six months ago. It takes ten minutes to figure out what the test actually verifies. The mock setup is dense, the expectations are chained, the matchers are generic. The intent is buried under the mechanics.
Most MVC PHP projects skip the Presenter. The controller fetches an entity, passes it to a template, and the template handles the rest: formatting dates, computing labels, picking CSS classes from status values. It feels pragmatic at first. It rarely stays that way.
"Micro-framework" gets sold as simplicity. Pick a router, handle requests, stay out of your way. The reality is different: micro doesn't mean simple, it means incomplete by design. The decisions the framework skips become your decisions - and in a project that grows, those decisions accumulate.