php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Your Dependency Tree Is Bigger...

Key Takeaways A transitive dependency is a package you get because something you depend on needs it. One npm package can drag in hundreds of transitive dependencies, each able to...