Here are suggested hooks for a developer repository, in a composer based PHP project.
The pre-commit avoids direct commits in masterbranch and performs quality checks (qa script) on changed files,
blocking the poor quality code.
The post-merge install new versions of packages on composer.lock changes and perform a new QA check on incoming code.
The quality checks are based on PHP Mess Detector and PHP CodeSniffer