I’m Johannes Wachter
Sulu Core Developer and Symfony AI Core Team member. I build the AI tooling I write about, and turn what I learn into software you can actually understand, test, secure and maintain.
- A security release announced before its details
The PHP security team announced on php.internals that a release on Wednesday, October 21 at 14:00 UTC fixes two critical vulnerabilities, both rated CVSS 4.0 9.2. It says nothing about what they are, and it reserves the right to release earlier if details leak or exploitation shows up.
- The scanner report nobody reviewed before sending
Anthropic's new Cyber Mission includes a free OSS Scanner: enrolled open source projects get periodic scans, with a proof of concept and a suggested fix per finding. What caught my attention is a sentence in the announcement itself.
- A test that saves object numbers tests PHP, not your code
One added line in a Symfony AI pull request broke 25 tests without any assertion changing. The tests were checking something nobody meant to check.
Core Dev Sulu CMS · Core Team symfony/ai · Building Symfony Mate · External Lecturer @ FH Vorarlberg
On the bad days, this is what I put on: Claude is in the Stand-up.