Issue #5
31 March 2026
"This week’s picks all reward a closer look: at codebases, at language design, and at security assumptions we too easily take for granted."
— Stefan & Sebastian
phpstan.org
This article by the creator of PHPStan shows how you can gain useful insight into your codebase, such as understanding dependencies, spotting architectural patterns, and generating data that supports documentation or decision-making.
Picked by Sebastian Bergmann – "We need better tooling to understand our code. I love that Ondřej is pointing the way forward."
medium.com/@edmond.ht
This article looks into what it would really take for PHP to support meaningful multithreading in the future. In addition to the single-threaded-plus-offload model, true parallel execution inside the language would require deep changes to memory management, object handling, and the engine itself.
Picked by Stefan Priebsch – "What makes this worth reading is not whether multithreading arrives soon, but how clearly it shows the architectural cost of getting there."
github.com/m0x41nos
This repository presents a proof of concept that makes an uncomfortable point very clearly: PHP sandboxing
mechanisms like disable_functions are not a reliable security boundary on their own.
Picked by Stefan Priebsch and Sebastian Bergmann – "This is not an article in the usual sense, but we still think it is worth knowing about. In practice, we never see server security depend on this feature."