For the record: I dunno why you left, but the MOPB ombudsman-like
approach of a security audit is a GOOD THING, imho, so I would like to
see that work continue to YOPB :-)
Security audit is not just good, it's great. Everybody should have one :) So I don't think there's any problem with MOPB and things reported there. Some of them are harder to fix than others, but generally it's great to have PHP audited. More problem is when things such as "there are a lot of problems in PHP but I'm not going to specify because PHP group are bad guys" appear - then it's of no use to anyone.
--
Stanislav Malyshev, Zend Products Engineer
stas@zend.com http://www.zend.com/