Right, but isnt having pear arround at all (and the default modules that it installs, which are out of date) a security risk?
Code:
# pear list-upgrades
WARNING: channel "pear.php.net" has updated its protocols, use "channel-update pear.php.net" to update
pear.php.net Available Upgrades (stable):
=========================================
Channel Package Local Remote Size
pear.php.net Archive_Tar 1.3.2 (stable) 1.3.9 (stable) 17.7kB
pear.php.net Console_Getopt 1.2.3 (stable) 1.3.1 (stable) 4.4kB
pear.php.net PEAR 1.7.2 (stable) 1.9.4 (stable) 290kB
pear.php.net Structures_Graph 1.0.2 (stable) 1.0.4 (stable) 30kB
pear.php.net XML_RPC 1.5.1 (stable) 1.5.5 (stable) 32kB
WARNING: channel "pecl.php.net" has updated its protocols, use "channel-update pecl.php.net" to update
Channel pecl.php.net: No upgrades available
And since asl lists popen and pclose as disabled php functions, you cant update these using pear upgrade-all unless you enable them really quick - which means you have one extra step to do in a daily maintenance or update scheme.