Ive used #PHP for many years for so many different projects. One thing I've always wondered is what libs/deps were being installed with the PHP platform of choice. As devs we need to do the due diligence to know what we are using and in particular what vulns come with it.

Blog post write up i did recently on the importance testing PHP composer for security vulns 

https://snyk.io/blog/testing-php-composer-security-vulnerabilities-snyk/