I guess it's 1.3.8a ... I just checked the tarball I downloaded.

as for the PFP stuff - my client's using it already with another cart and it's functional. So yes - we have an account with Payflow Pro.