Uhm. I guess. But this seems like a FUD.. We already include plenty of external code - everything from trivial [strndup()](https://github.com/mongodb/mongo-php-driver/blob/master/mcon/utils.c#L531) to the [MD5](https://github.com/mongodb/mongo-php-driver/blob/master/mcon/utils.c#L256) implementation.