1.What PHP version are you running in production?
2.What is your automated test coverage?
3.Is the codebase using a modern framework or MVC structure?
4.How are third-party dependencies managed?
5.What is your CI/CD situation?
6.How is the codebase documented?
7.How is institutional knowledge managed?
8.How is application security handled?