php/php-src

This repository is the source of the PHP interpreter, a general-purpose scripting language especially suited to web development. Most readers will use it indirectly through a PHP installation rather than by building it, because the repository serves two distinct audiences: people deploying PHP applications and contributors who build or change the interpreter.

Using PHP versus building it

If the goal is to run PHP code, the documented route is a prebuilt package: Windows binaries come from windows.php.net and are usable after extracting the archive, while other systems follow the manual's installation chapter. Building from Git is a separate path. A minimal build needs autoconf, bison and re2c; a default build additionally needs libxml2 and libsqlite3, with platform-specific package lists given for Ubuntu, Fedora, macOS and MacPorts. The README recommends --enable-debug for development builds and provides for installing the result afterwards. Building from source therefore presupposes a compiler toolchain and these libraries, not just a PHP runtime.

Testing and extensions

Compiled sources come with an extensive test suite run via make test. It runs in parallel by default using up to 10 detected logical processors, and the worker count or target directories can be narrowed through TEST_PHP_ARGS or TESTS. Quality-assurance details live on qa.php.net. Functionality beyond the bundled extensions is obtained from the PIE extensions list and installed with PIE, while PECL is described as deprecated — a relevant distinction for anyone choosing where to pull extensions from.

Contributing

The contribution model is not a free-for-all: bug fixes can go in as pull requests, but new features require an RFC accepted by the developers through a defined voting process. Commit messages reference GitHub issues as GH-NNNNNN, and older bugs.php.net tickets as #NNNNNN. Further rules are spread across the contributing guide, coding standards, internal documentation and release process documents, with an explicit Git workflow for how pull requests are merged.

Licence and current context

PHP is distributed under a Modified BSD licence (SPDX: BSD-3-Clause), so the source may be used under those terms. Separately, the Hacker News discussion around the October 2026 security release concerns critical remote-code-execution vulnerabilities and coordinated disclosure; commenters argued over the disclosure timeline, and the thread's top item links several advisories and the project's security-release post PHP security release discussion. Readers evaluating the interpreter should consult the official advisories and installation documentation rather than treat the repository README as security guidance.

HotRepo's take

The project is long-established; the recorded board data is too sparse to infer a trend and is not a reason to adopt or avoid it.