Nils Adermann

Co-Founder @packagist / - Co-creator of #composerphp - Board Member @thephpf - he/him

[Tideways Profiler @tideways]

This year, “PHP2Shell” showed the general public how much depends on open source. Tideways is doubling its sponsorship of @ThePHPF to $24,000. We also freed up our colleague @__edorian for six months to help fix PHP2Shell at the Foundation.

https://t.co/1tQR07iVcS

[Damien Seguy (@[email protected]) @faguo]

🐘 @AmsterdamPHP is reuniting for the PHP 8.6 release day!

On Thursday, Nov 19th, our community reunites at Digital Natives to celebrate. 🎉

Yours truly will dive into #PHP 8.6 new features!

First-timer or longtime member, elephpant, this is the night to join the tribe!

[Nils Adermann @naderman]

Heading to @TheLeadDev Berlin conference today and tomorrow 😀 Message me to meet up if you're there! Excited to hear and discuss perspectives on our rapidly evolving industry: especially supply chain security & devtools, relevant to @packagist
#LeadDev #LeadDevBerlin

[Mark Manning @antitree]

Finding CVEs is now the new 3D printing for infosec: There's no effort, nobody wants them, and we all have to pretend to be impressed.

[Nils Adermann @naderman]

@zeeg Not disagreeing with that, just wondering which bits are tied to vercel specifically

[Mario Zechner @badlogicgames]

2027 will be the year literally everything will burn down. it will be a glorious bon fire. and once we have paid for the past 40 years of software sins, we will rebuild it. hopefully for the better.

https://t.co/0Pl4RYIAmw

[Nils Adermann @naderman]

Just set this up for a couple services, feels like magic 😯

[David Soria Parra @dsp_]

This is a big step towards an truly seamless experience for users. If you build for Claude make sure you support this.

[Jacob Lauritzen @jacsebl]

Got fable to hand-write weights of a 100k param model to recognize real versus fake legal citations.

Basically one-shotted a full NN that’s better than training it

[Christopher Hertel @chr_hertel]

In three weeks I'll be speaking at #SymfonyCon Warsaw 2026! 🎉🇵🇱

And the best thing, way more people, and not only AI, not only Symfony:
Check the schedule here: https://t.co/YBV1IT44He

See you there!

[lcamtuf @lcamtuf]

I would like to congratulate the organizers of the 2026 Cybersecurity Awareness Month for putting together a truly spectacular event

[Armin Ronacher ⇌ @mitsuhiko]

There is just no good way to bring that news. The old times are not coming back. I don't envy anyone though who has a workforce who is not on board with the changing times. https://t.co/hFEDEx6MAT

[Klaas @forgebitz]

i have no time to maintain all my vibe coded tools

we need a business model where someone else maintains the code and i just pay a monthly fee

[Matteo Collina @matteocollina]

Just to clarify my current level of security paranoia.

Somebody is making videos of my PRs and sending them to me, and my first thought is: does the Mac/Linux/Windows decoder have an RCE, and is someone trying to hack me?

[Nils Adermann @naderman]

@binaryfire Things changed, especially speed of exploit development, time to active exploitation has changed drastically since then, primarily due to AI, and this changes the math here a lot.

[roots.io @rootswp]

Cooldown now works for WordPress plugins and themes too! WP Packages records when it first serves each version, and resets the clock if a release is changed after the fact on WordPress.⁠org

https://t.co/UP95RfuR4P

[Alvaro Videla - 🇺🇾🇨🇳🇨🇭🇮🇹 @old_sound]

Maybe companies need Evals? 🤔

[Jussi @jussisaur]

me a month ago: bro using public wifis is completely fine in 2026, everything uses TLS, stop being paranoid

eMudhra: 4

me: well,

[Nils Adermann @naderman]

@mitchellh another one for your OSC7501 list: Composer package manager for PHP 😃

[Packagist @packagist]

Composer 2.11 is out 🚀 cooldown dependency policies hold back freshly published package versions for an hour or a day, so compromised releases can be flagged before they reach your composer update. https://t.co/IsrRN6TmIL #php #phpc #composerphp #supplychainsecurity