Sources

Evidence, corrections and updates

Primary PHP advisories take precedence over summaries. Research demonstrations are identified separately from confirmed general exposure. We revise content when the underlying guidance changes and show a review date. Report mistakes or missing evidence by email with the page URL and a primary-source reference. We do not publish guessed package revisions, invented test results or unsupported claims of safety.