This project is still in its early development stages, so please consider any release not explicitly labeled as stable as experimental.

If you find a security vulnerability, please refrain from creating a public issue on Github, but rather contact me directly at mike@php.net or another suitable private contact method.

Any past vulnerabilities should be found in release changelogs after they have been fixed.

This is free and open source software provided under the the terms of the 2-Clause-BSD-License, see the LICENSE file. Thus, honor and goodwill is all being offered for reporting -- or even fixing -- any vulnerability.