This is a great package. I'm still poking around to see how things are set up but overall I'm impressed and its saved me a lot of time this afternoon from using fink & recompiling. I realize it's dev so here's what I've found to add to documentation && || FAQ:
Should /Applications/xampp/xamppfiles/mampp be renamed to
/Applications/xampp/xamppfiles/xampp to be consistent?
Please add to the FAQ that executing /Applications/xampp/xamppfiles/mampp security sets the username for http://localhost/xampp to 'xampp'. I had to dig through /Applications/xampp/xamppfiles/lib/xampp.users to find it
Executing /Applications/xampp/xamppfiles/bin/mysql_secure_installation breaks http://localhost/xampp/status.php for MySQL because /Applications/xampp/htdocs/xampp/mysql.php relies upon anonymous connection with no password.
The security status for MySQL's port at http://localhost/xampp/security.php seems to return a false positive. While xampp security commented out the port number, I edited /Applications/xampp/etc/my.cnf to remove the comment from skip-networking and restarted mysql. The security page says MySQL is not listening on the network but nmap localhost shows port 3306 open. A different approach may be to call /usr/sbin/netstat from /Applications/xampp/xamppfiles/share/xampp /checkmysqlport and grep for a tcp4 LISTEN.
As I looked into this some more /Applications/xampp/xamppfiles/bin /mysql.server seems to be ignoring /Applications/xampp/etc/my.cnf and only looking for my.cnf in the datadir variable in /Applications/xampp/xamppfiles/var/mysql because everytime I start and stop mysql or shut all of xampp down MySQL continues to listen on 3306 although skip-networking is enabled in my.cnf