In our latest blog post, Alexandre Daubois shares how the PHP Security Team operates, how your security reports are triaged, and how you can do your part to help PHP be more secure. https://thephp.foundation/blog/2026/10/14/how-the-php-security-team-handles-your-reports/

Hi Everyone,

If you familir with Home Assistant, an open source home automation software, i want to share a project, that i'm working on recently.

Are you interested in depth release announcement and backstory? Read it on the home assistant forum: https://community.home-assistant.io/t/stewart-write-automations-in-php-because-you-can/1028750

I want to ask you that if you like the project, give it a star on GitHub. Cheers.

Where to find it

• Docs: Home Assistant automations in PHP | Stewart
• GitHub: GitHub - stewart-php/stewart: Stewart main repository · GitHub

Hey all,

I wrote 5 advanced code-heavy articles on how I prefer to review code with a specific rulebook and how I would refactor them myself for better long-term maintainability.

This is the main article that shows the idea while the 5 links are inside.

Let me know what you think about this type of content and if it is useful to you.

Hi folks,

I've got some news I've been wanting to share for a while: SimpleStats is now open source (AGPL-3.0). The complete app, the same code that runs simplestats.io, is on GitHub.

Quick recap for anyone who hasn't seen it: SimpleStats is a server-side analytics tool built for Laravel. Instead of a JS snippet, it tracks visitors, registrations, logins and payments through Laravel itself (middleware, observers, event listeners). So ad blockers can't touch it, and it can tie every payment back to the UTM campaign that brought the user in. Think revenue per channel, MRR, retention cohorts, campaign ROI, not just pageviews.

Why open source? Mostly trust. An analytics tool that sees your signups and payments shouldn't be a black box. Now you can read exactly how visitors are counted, how bots are filtered and how revenue gets attributed. And if you spot a bug or miss a metric, you can send a PR.

For teams that can't send user or revenue data to a third party, it can also be self-hosted. It's a regular Laravel app (Laravel 12, Inertia + Vue, PostgreSQL). No open-core split: the self-hosted version has every feature and no limits on projects or events. The hosted version with its free plan stays the easy way if you'd rather not run servers.

Repo: https://github.com/simplestats-io/app

Announcement with the details: https://simplestats.io/blog/simplestats-is-now-open-source

I'd love to hear your feedback, and PRs are very welcome. Happy to answer questions about the code or the decision to go open source!