Surely that would be up to the server configuration? This pull is using sys_get_temp_dir to get the temporary dir for PHP. I would imagine that the server is configured incorrectly if a server admin chooses to set a temporary dir for PHP, and then use open_basedir in such a way that PHP is denied access to the temp dir.