yiisoft/yii2 — pull request #2422 by sarciszewski (2014-02-13 18:27:03+00:00)
Title: Inconsistently insecure

Why use a strong random number generator in one place, but not another? I know salts have no cryptographic security requirement, but collisions are less likely if you use one.