Package Health

auth0/symfony

Documentation and repository structure are strong, with established organizational backing. Workflow hygiene needs attention before relying on automated publishing and scanning paths.

Latest 6.0.0-beta.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Are you affected? Scan for Free

Health Score Breakdown

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, despite a release during the broader period; this weakens evidence of ongoing maintenance capacity.

Repo issue activitycaution

Only 4 issues and 2 pull requests are open, but there was no issue or pull-request movement in the last month; this is a mild activity concern rather than evidence of abandonment by itself.

Version stabilitycaution

This is a beta release, so its API may change and the release notes explicitly call for an upgrade-guide review; recent prereleases are only 15% of releases, which partly offsets the concern.

Workflow auditcaution

All five workflows were analyzed successfully, with no untrusted checkouts or script-injection findings; however, high-confidence template-injection and bot-condition findings, one top-level write-permission workflow, and one unpinned action create workflow-hygiene concerns. The template-injection and bot-condition findings are not independently shown to combine with an exploitable trigger.

Vulnerabilities

TitleVersionsSeverity
CVE-2026-50157
auth0/symfony is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 5.0.0-BETA0 - 5.8.0.
5.0.0-BETA0 - 5.8.0
Medium

Package versions

Maintainers

Auth0

Direct Dependencies

DependencyLast ReleaseScore
symfony/cache
Version ^6.4 || ^7.0 || ^8.0
—
—
auth0/auth0-php
Version ^9.0@beta
—
—
symfony/security-bundle
Version ^6.4 || ^7.0 || ^8.0
—
—
symfony/framework-bundle
Version ^6.4 || ^7.0 || ^8.0
—
—

Weekly Downloads

Info

Last Published
2 months ago
Created
11 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform