9 ms·

The excitement comes when security issues are discovered in no longer maintained code

• pkrumins 4y ago
  There are no security issues.
  • tchaffee 4y ago
    That's a laughable claim. https://www.cvedetails.com/vulnerability-list.php?vendor_id=74&product_id=128&version_id=0&page=1&hasexp=0&opdos=0&opec=0&opov=0&opcsrf=0&opgpriv=0&opsqli=0&opxss=0&opdirt=0&opmemc=0&ophttprs=0&opbyp=0&opfileinc=0&opginf=0&cvssscoremin=0&cvssscoremax=0&year=0&cweid=0&order=1&trc=604&sha=d8a9f07b702ae6252893a7ef73f2f2812bbcbb8a https://www.cvedetails.com/vulnerability-list.php?vendor_id=... And just 10 days ago: Code security company SonarSource today published details on a severe vulnerability impacting Packagist, which could have been abused to mount supply chain attacks targeting the PHP community. https://www.securityweek.com/critical-packagist-vulnerability-could-have-allowed-php-supply-chain-attack https://www.securityweek.com/critical-packagist-vulnerabilit... And this source says PHP is the 2nd most vulnerable server-side language in the world. https://www.thewebmonkeyonline.com/php-security-issues-you-need-to-protect/ https://www.thewebmonkeyonline.com/php-security-issues-you-n...
    • pkrumins 4y ago
      Lulz