We should look at adding 'PHP Magic Number Detector' to our standard tooling
https://github.com/povils/phpmnd
https://packagist.org/packages/povils/phpmnd
Would be nice to have it in MediaWiki-Codesniffer but I think it might add too much complexity