Let's get one with right
phpVMS was not at all made for PHP4. It is fully object orientated which was not supported in php4.
It was made for 5.2 (released in 2006). However the rest of your post is correct, there is numerous bugs that are there, that really need to be fixed. I appreciate Nabeel is busy in real life, but there is plenty of people around who could help, I have just recently fixed a big security hole in Github.
The first priority is to issue a new release, fixing this bug. I don't think they realise how big it is, I could hack any phpVMS installation right now. So can any one else that views the issue on github and knows how to exploit it.
The second priority is fixing the bugs you listed above.