I was referring to security issues regarding dependency management. The git.php.net server was also not compromised, as far as I know, from a PHP vulnerability

I was referring to security issues regarding dependency management. The git.php.net server was also not compromised, as far as I know, from a PHP vulnerability that was active at the time.