PHP Foundation ‘under-funded’ with only 1 full-time staff member, director says

Read the original at The Straits Times ↗
Cite

The Straits Times. (2026, October 24). PHP Foundation ‘under-funded’ with only 1 full-time staff member, director says. The Straits Times. https://www.straitstimes.com/world/united-states/php-foundation-under-funded-with-only-1-full-time-staff-member-director-says

Dated from the outlet's own feed. Check the original for its byline.

The Straits Times · collected 2026-10-24 · by The Straits Times

Quick Summary

Elizabeth Barron, the executive director of the PHP Foundation, reported on October 23 that the foundation has only one full-time staff member and operates with mostly part-time contractors, highlighting its limited resources despite supporting a programming language used by up to 70% of global websites. The recent discovery of two critical flaws in PHP underscored the importance of adequate funding for the foundation’s security efforts and maintenance work.
Written locally by qwen2.5:14b on 2026-10-24, using this article's own text rather than the other coverage of the same event (that is the story summary below).

AI analysis runs on qwen2.5:14b, locally

Story summary

The PHP Foundation, which supports the programming language PHP used by up to 70% of global websites, is severely underfunded with only one full-time staff member and 14 mostly part-time contractors. Executive director Elizabeth Barron disclosed this in an email on October 23rd. Despite its critical role in web security, the foundation relies solely on donations and grants for funding, with board members serving as unpaid volunteers. The recent discovery of two serious flaws in PHP highlighted the importance of the foundation's work, though it has no evidence that hackers exploited these vulnerabilities before they were patched. The foundation collaborates with cybersecurity firms such as Wiz and Calif, and tech companies like OpenAI to investigate security issues and coordinate fixes.

Written for “PHP Foundation Funding Issues” on 2026-10-24, grounded in this article and the 0 other(s) covering the same event.
Why this leaning score
The model judged this article politically coded and scored it -0.35, but all 2 of its quote(s) are attributed speech - words the article quotes from someone, not the article's own narration, so the score is not published.
Written under an earlier scoring contract, which gave a paragraph rather than checkable quotes. Re-analysing this article replaces it.
Leaning score withheld for article 103299: attributed speech only · logged 2026-10-24

Story

📰 PHP Foundation Funding Issues
Technology · 1 article(s) covering the same event.

Compared with similar articles

This article reads unscored and hedges 7% of its claims. Each row says how that neighbour differs.
BBC News
⚖️ leaning not scored 🔴 16% hedged 4 of 25 📰 publisher trust 69
“The articles discuss different aspects related to PHP security, with Article A focusing on immediate actions taken by organizations due to vulnerabilities, while Article B addresses the funding and staffing situation of the PHP Foundation.”
The Straits Times
⚖️ leaning not scored 🔴 15% hedged 2 of 13 📰 publisher trust 68
“Article A reports on vulnerabilities in PHP causing websites to go dark, while Article B discusses the funding and staffing of the PHP Foundation in response to the disclosed flaws.”
The Straits Times
⚖️ leaning not scored 🔴 15% hedged 4 of 26 📰 publisher trust 68
“The articles discuss different aspects of PHP, with Article A focusing on recent vulnerabilities that caused government websites to go offline, while Article B discusses the funding and staffing issues within the PHP Foundation.”
CBC News
⚖️ leaning not scored 🔴 11% hedged 2 of 18 📰 publisher trust 74
“The articles discuss different aspects related to PHP but describe distinct events: one about sites going offline due to a vulnerability, and another about the funding situation of the PHP Foundation.”
Al Jazeera
⚖️ leaning not scored 🔴 10% hedged 2 of 21 📰 publisher trust 60
“The articles discuss related topics about security flaws in PHP and funding issues for the PHP Foundation, but describe different specific events happening at different times.”
BBC News
⚖️ leaning not scored 🔴 12% hedged 5 of 41 📰 publisher trust 69
“Article A discusses the discovery of vulnerabilities in PHP and the immediate global response, while Article B addresses the funding issues of the PHP Foundation post-discovery.”
Dawn
⚖️ leaning not scored 🔴 28% hedged 7 of 25 📰 publisher trust 71
“Article A discusses the discovery of security flaws in PHP and its impact on websites, while Article B focuses on the underfunding and staffing situation of the PHP Foundation.”
Evening Standard
⚖️ leaning not scored 🔴 15% hedged 3 of 20 📰 publisher trust 65
“The articles discuss different aspects related to PHP security and funding but do not describe the same specific incident or time.”
NBC News
⚖️ leaning not scored 🔴 27% hedged 8 of 30 📰 publisher trust 95
“The articles discuss different aspects of the PHP security issues; one focuses on hackers' difficulty exploiting vulnerabilities, while the other addresses the funding and staffing of the PHP Foundation.”
CBS News
⚖️ leaning not scored 🔴 50% hedged 1 of 2 📰 publisher trust 66
“The articles discuss different aspects related to PHP but describe distinct events: one focuses on a critical vulnerability in PHP, while the other discusses the funding and staffing of the PHP Foundation.”
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
15
sentences that state something as happening or true
Uncertain
7%
1 of 15 hedged ("reportedly", "may", "according to")
Leaning
withheld
no quote in the article backed the model's score
Publisher signals
68/100
The Straits Times's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
1
Technology
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-10-24 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

The Straits Times · 3477 article(s) · 4 correction(s) detected
Running correction rate · 4 correction(s)

Who wrote this

The Straits Times
2184 article(s) here · 1 carrying a prediction
🔮 Yet the non-profit foundation that supports PHP, which may underpin up to 70% of sites globally, operates on a shoestring budget.
🔮 Similarly, President Donald Trump’s administration asked Musk, who is chief executive officer of SpaceX, to make the service available in Iran following US-Israeli strikes in 2025 and 2026, in hopes it would bolster internet access and communications for anti-government protesters, a former senior Trump official and a person familiar with the matter told Reuters.
🔮 US President Donald Trump has imposed a raft of tariffs on imports from Canada and frequently suggests he could annex the country.
🔮 The party has said that it will not respond to inquiries on whether emails are genuine, and urged the media to refrain from disseminating content linked to data theft.
🔮 Parisians are buying tear-gas cannisters and pepper sprays to defend themselves and their property during protests, which are expected to continue over the weekend, the owner of a weapons shop in the French capital told Reuters.
🔮 It is expected to arrive in the United States on November 7.
🔮 Saudi missile plant expansion may produce more powerful missiles, study says
🔮 On top of the reinforced police presence, special-intervention forces normally used for risky missions like counter-terrorism will be used if needed, Interior Minister Laurent Nuñez said on Oct 21.
🔮 Russia's defence ministry said on Telegram that its freed servicemen were in Belarus and would be transported to Russia once they had received psychological and medical assistance.
2026-10-23 · assertive framing · Russia and Ukraine swap 270 prisoners each
🔮 Harry, the second son of King Charles III and estranged brother of heir to the throne Prince William, married the former American actress at the royal family’s Windsor Castle estate in May 2018.
Also by The Straits Times
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 2184 articles by The Straits Times →

Topics

AMSTERDAM Calif OpenAI PHP Foundation Wiz

Subjects

Barron PERSON · 2× Calif ORG · 2× OpenAI ORG · 2× Wiz ORG · 2× AMSTERDAM GPE · 1× Cloudflare ORG · 1× Elizabeth Barron PERSON · 1× PHP ORG · 1× PHP Foundation ORG · 1× the PHP Foundation ORG · 1×

Narrative

While Web security company Cloudflare has reported millions of hacking attempts, Barron said the foundation had no evidence hackers were able to exploit the vulnerabilities before they were disclosed, or on sites that have been patched.
framing: assertive · carried by 1 article(s) · first seen 2026-10-24
🔮 Yet the non-profit foundation that supports PHP, which may underpin up to 70% of sites globally, operates on a shoestring budget.

Claims (15 extracted, 1 hedged)

PHP Foundation ‘under-funded’ with only 1 full-time staff member, director says AMSTERDAM - asserted
director → fund → member
The discovery of two serious flaws in PHP this week set off a global scramble to keep websites safe from hackers, showing just how critical the three-decade-old open-source programming language is to the internet. asserted
language → set → internet
Yet the non-profit foundation that supports PHP, which may underpin up to 70% of sites globally, operates on a shoestring budget. uncertain
which → support → budget
“We have one full-time staff member (that’s me) and 14 mostly part-time contractors,” executive director Elizabeth Barron of the PHP Foundation said via e-mail in an interview on Oct 23. asserted
Barron → have → Oct
Board members are unpaid volunteers, and funding comes from donations and grants. asserted
funding → come → donations
The foundation works with outside researchers and companies, including OpenAI and cyber security firms Wiz and Calif, to investigate security flaws and coordinate fixes, including the Oct 21 patches. asserted
foundation → work → patches
While Web security company Cloudflare has reported millions of hacking attempts, Barron said the foundation had no evidence hackers were able to exploit the vulnerabilities before they were disclosed, or on sites that have been patched. asserted
that → report → sites
“We received no further indication from OpenAI, Wiz or Calif, with whom we’re working closely on this issue, regarding any issues on patched systems,” she said. asserted
she → receive → systems
Artificial intelligence has proved both a help and a burden to the foundation. asserted
intelligence → prove → foundation
It helped researchers find the flaws, which had been present for a decade, and Barron said it made programmers more efficient. asserted
programmers → help → decade
However, it is also increasing maintainers’ workloads. asserted
it → increase → workloads
The PHP project is receiving nearly twice as many proposed code changes as a year ago, “yet the number of contributors hasn’t doubled,” she said. asserted
she → receive → contributors
Reviewing contributions and bug reports requires “a massive amount of human input and experience”. asserted
Reviewing → review → input
Recent events have shown how heavily companies and governments rely on PHP, Barron said. asserted
Barron → show → PHP
“Given that reliance, it is clear that PHP is incredibly under-funded.” asserted
it → give → reliance
💬Give feedback
🕘History 🎫Support