PHP vulnerability shows need for open-source maintenance IT Brew