Laravel Vet is a PHP dependency audit tool in beta that shows code changes from composer updates before they're installed, similar to Rust's cargo vet. It uses AI coding agents to review package changes and maintains a trust record in vet.json, working with any PHP project and installing as a Composer plugin.
SecretGate is a self-hosted, framework-free PHP application for anonymous encrypted messaging. It uses client-side RSA-OAEP and AES-256-GCM encryption, ensuring the server can only store unreadable ciphertext, with ephemeral message expiry and no user tracking or data collection.
A store listing offers premium WordPress plugins, themes, and PHP scripts with activated licenses for $5 per item as of September 9, 2026.
Yac is a WordPress object cache extension that stores data in shared memory accessible to all PHP workers, eliminating the need for a separate cache server. It achieves ~19% faster page renders than Memcached by removing socket and network overhead, with no external infrastructure to operate or maintain.
U is a new programming language that transpiles PHP, JavaScript, and TypeScript to compiled C binaries, achieving 14K–70K requests per second compared to PHP's 800 req/s and Node's 2.4K req/s. The compiler catches null dereferences and capability violations that LLMs introduce 23–31% of the time, producing tiny, dependency-free binaries suitable for edge computing and resource-constrained environments.
WordPress Security Skills is a modular resource that teaches AI coding agents like Claude Code and Cursor to write secure WordPress code and audit plugins and themes. Users can install these Markdown-based skills in their projects to guide AI-generated code toward secure patterns, addressing common vulnerabilities like missing nonce checks and SQL injection.
A developer shares lessons learned from porting PHP's DOM extension, discovering that declaring interfaces without fully implementing them creates hidden obligations that only surface when user code subclasses the implementation. The post emphasizes testing both sides of abstractions and maintaining accurate documentation of limitations, as nine of fourteen documented "known limitations" were found to be incorrect or outdated.
A store listing WordPress themes, plugins, and PHP scripts available for $5 each with product license activation, posted September 9, 2026.
PHP 1.0.0 now runs natively on ESP32 microcontrollers through php-baremetal, which cross-compiles the unmodified Zend engine for bare-metal execution. The project uses the official embed SAPI with minimal build-time patches, enabling full PHP features like OPcache, OpenSSL, SQLite, and WiFi directly on five-dollar chips without transpilation or reimplementation.
A web developer with 25+ years of experience argues that PHP, despite historical popularity driven by low barriers to entry and frameworks like Laravel, is losing relevance as AI coding assistants enable developers to build complex projects quickly in other languages like Go and Rust with better performance and cost efficiency.