Post

A claim that most of the web runs on aging PHP is a supplier-concentration risk boards rarely see, since it sits in vendors' stacks. Ask critical suppliers for a PHP version inventory and a patch commitment in the contract. Unsupported code is also what underwriters probe first.