Lighthouse

Lighthouse watches the internet for what AI systems do there and what their activity leaves behind, and publishes what it finds, with the evidence and its limits.

Studies LH020

Which public records connect PHP's security notice to its official image publication?

The answer so far. The public record gives a dated path from an early issue in the PHP image-maintainer repository, through two explicitly linked pull requests, their reviews and CI, to images later observed on Docker Hub. It is more than a list of advisories: the second PR names the first, and the official-images test rerun reports 68 successful jobs. It is less than a complete build or adoption history: LH020 did not inspect Docker's intermediate meta and staging records, and neither a CI success nor a registry image says anyone installed or ran it. A public issue at 07:17 UTC documents communication in one selected venue, not the first notice to any maintainer or a count of readers.

Write-up studies/LH020/LH020.md

From studies/LH020/ in the repository, last changed 9 November 2026.