Commit

66c7011

I see a fair amount of people in my tech bubble, using AI to backport the PHP security patches to older PHP versions (including 7.x). What I do not understand is why they do not take the time to update their codebase so it can work on an actually security maintained PHP version, and why, in the first place, this was not on the current todo list. With tools like rector, phpstan, mago, etc., an AI agent can be pretty decently constrained to help do the required updates so there are no deprecated parts, and PHP has a pretty good backwards compatibility situation.

commit 66c7011