yes, "The method by which these servers (of php.net) were compromised is #unknown at this time." and I believe if they really "have verified that their Git repository was not compromised," why does "it remain in #read only mode as services are brought back up in full." cc @question
