Only artifacts attached to the latest release revision of each maintained PHP minor are supported.

Please use GitHub's private vulnerability reporting for this repository. Do not open a public issue for suspected compromised dependencies, build-system vulnerabilities, checksum bypasses, or release-pipeline weaknesses.

Include the affected tag or commit, reproduction steps, and any known impact. The maintainers will acknowledge a report as soon as practical and coordinate remediation and disclosure with the reporter.