IT之家 · ITHome
PHP Foundation faces funding strain with only one full-time employee
The PHP Foundation’s executive director says she is its only full-time employee, alongside 14 mostly part-time contractors, with funding dependent on donations and grants. Researchers used AI to find two high-risk PHP vulnerabilities, and the foundation worked with OpenAI, Wiz and Calif on patches. Maintainers also face a growing code-review workload.
What to know
- 01
Cloudflare recorded millions of attack attempts; the foundation reported no evidence of successful exploitation before disclosure or attacks against already-patched websites.
- 02
Code-change proposals are nearly double their level a year earlier, without a corresponding doubling in contributors; reviewing submissions and vulnerability reports requires substantial human effort and experienced judgment.
Why it matters
The report cites estimates that up to about 70% of websites rely on PHP, making its maintenance funding relevant to web security.
AI-assisted brief. Read the source for full details. Editorial & sourcing policy
