Keycloak-backed Symfony Security: KeycloakUser + KeycloakUserProvider for JWT-authenticated users managed in Keycloak, plus a CLI for token retrieval.
72%
Total Score
83
63
50
The package is only 101 days old and has three releases, with releases roughly 11 days apart; this shows early activity but not yet a mature long-term maintenance record.
Four commits from two active contributors in the last three months, with a push about two months ago, indicate some ongoing work but only a limited maintenance track record.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap for a security-related Symfony bundle.
The repository has no security policy, which makes vulnerability reporting and response expectations less clear for a package handling authentication.
Version 0.3.0 is not a stable major release, so its API and behavior may still change substantially despite not being marked as a prerelease.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/security-bundle Version ^7.0 | — | — |
symfony/framework-bundle Version ^7.0 | — | — |
lexik/jwt-authentication-bundle Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.