●Artisan Weekly
IssueNº 107
Dated23 Oct 2026
Subscribers96
← Back to Archive
Artisan Weekly Edition 107

Edition №107

Published
Week ending
Items
10 featured · 2 notable
● Top 10 Video companion
on YouTube
Editor's
Note

What a week, the vulnerabilities that patch dance how much more drama can we have? A lot of this weeks top ten is about the patches, what happened before hand what happens after. grab a coffee and enjoy some breakdowns of all that happened this week.

By
Daniel Newns

Top 10 Links

Featured · Edition 107
01
Blog Post thephp.foundation

Today's PHP Security Release, and How We're Strengthening PHP Security

The PHP Foundation discusses two critical remote code execution vulnerabilities patched in PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35, and outlines how PHP's security processes and resources are being strengthened to prevent similar issues in the future.

02
GitHub Repository github.com

Sponsor @oerdnj on GitHub Sponsors

Support Ondřej Surý's open-source work on Debian packages and critical infrastructure projects like BIND9. His sponsorship enables him to dedicate more time to maintaining the tools and repositories that the open-source community relies upon.

04
Blog Post nunomaduro.com

So, about the PHP security release

Nuno Maduro shares his perspective on the recent PHP security vulnerabilities, detailing his immediate response, insights into the people behind PHP releases, and practical advice for building resilient applications with security-first data practices.

Nuno Maduro
05
Blog Post hafiz.dev

Larastan Levels 0 to 10 on Agent-Written Laravel Code

An in-depth analysis of running Larastan static analysis at every strictness level on a production Laravel SaaS codebase built with AI assistance, revealing how nullable types multiply code complexity and which real bugs actually matter.

Hafiz Riaz
07
Blog Post juststeveking.com

Most of Your API Has Already Been Designed

A comprehensive guide to leveraging published HTTP standards in Laravel API design, introducing api-toolbox - a package that implements RFC-backed features like Problem Details, idempotency, and deprecation handling rather than building custom solutions from scratch.

Steve McDougall
08
Tool/Package tomasvotruba.com

Patch or Perish

An interactive tool that analyses your PHP project's dependency versions to reveal how many packages are end-of-life and no longer receiving security patches, helping developers understand their application's security exposure.

Tomas Votruba
10
Blog Post phpnews.net

Chainguard Broke the php2shell Embargo

An in-depth analysis of Chainguard's decision to release patched PHP builds before the coordinated disclosure embargo lifted for two critical remote code execution vulnerabilities, examining the dispute between Chainguard's CEO and the PHP Foundation over whether exploits were truly in the wild.

Eric Barnes

Also Notable

+2 more
Course codyssey.dev

Naming Things by Intent

This course lesson explores the critical difference between mechanical naming and intent-based naming in PHP code, demonstrating how choosing meaningful names rooted in business purpose rather than implementation details leads to more maintainable and readable applications that withstand refactoring.

Davor Minchorov
Course