Huge shout-out to the PHP Foundation for this.<p>Last year, it received close to 680K USD, and managed this security audit, sponsored 10 developers, and paid for various expenses. For a language that runs close to 75% of the web, it certainly deserves more funding.<p>Some of the recent initiatives from the Foundation (<a href="https://thephp.foundation/blog/2025/03/31/transparency-and-impact-report-2024/" rel="nofollow">https://thephp.foundation/blog/2025/03/31/transparency-and-i...</a>) :<p>- All PHP versions now receive a total of 4 years of security updates; 2 bug fixes + 2 security, up from 3.<p>- PIE: A replacement for PECL, to easily install PHP extensions (C, C++ compiled, not PHP packages).<p>- The security audit.<p>(I'm one of the PHP Core team and a volunteer at the foundation, happy to answer any questions, but almost all of the work is public)
Mainly I want to say thank you. An incredible amount of work and dedication has gone into php over a very long period of time. The php community has managed to reinvent php several times, mainly just to make the language better. May they continue with their great success.