Yeah. The one man thing isn't good. He has said that he will do a big rewrite of PHP Nuke to make it secure etc.. This was ages and ages ago and nothing has happened since. Thats not the main problem however, to make it "secure" he's going to encode it with the Zend Optimiser which means you won't have any source code access at all...

The relevant post is here