From Best Practices to Regulation

Today, it is considered unprofessional to release PHP code without conducting static analysis using PHPStan or automated testing using PHPUnit, for example.

Drawing parallels with the professions of medicine and construction, I demonstrate how voluntary best practices evolve into professional expectations, ultimately becoming regulatory requirements. You will learn what the EU Cyber Resilience Act might mean for the future of software development.

This presentation currently exists only as an idea and has not yet been accepted by a conference.

About me

My name is Sebastian Bergmann, and I have been working as a software developer and consultant in the PHP ecosystem for over 25 years. I support development teams in creating better software through modern practices, tools and training.

I am deeply committed to Open Source, maintain critical Open Source projects in the PHP ecosystem, and help shape the work of the PHP Foundation as a member of its board. I have also represented the interests of Open Source at the European Commission and am active in the Open Source Working Group ("Arbeitskreis Open Source Software") of the German Informatics Society ("Gesellschaft für Informatik").

I live and breathe Open Source and help shape how developers around the world test, write, and maintain their code.

More events where you can meet me are listed here.

My interactive online training courses are designed to provide you with practical knowledge that you can apply immediately. The next ones starting soon are listed here.

Upcoming events

London

February 20, 2026

PHP UK Conference

On February 20, 2026, I will be in London at the PHP UK Conference. There I will give the presentation "From Events to Insights: Testing and Documenting Event‑Based Software".

Event Website

More events

Back to overview