Package Health/friendsofsymfony/user-bundle

friendsofsymfony/user-bundle

The repository has no commits, new issues, or merged pull requests in the last three months, and it lacks a security policy. Its long history, organization backing, tests, release notes, and clear licensing provide useful stability despite the slower visible activity.

Latest v4.1.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Are you affected? Scan for Free

Health Score Breakdown

Dependency profile

The package declares 21 runtime dependencies for a substantial Symfony bundle, a sizable integration surface that modestly increases maintenance and compatibility burden.

Repo commit activity

The repository recorded zero commits and zero active maintainers over the last three months. The recent release partly offsets this, but the visible maintenance cadence is currently stalled.

Repo issue activity

There were no new or closed issues and no new or merged pull requests in the last month, with 107 open issues and 10 open pull requests; this indicates limited current issue-management activity.

Repo tooling

The project uses Make and Composer, but no security scanning tools were detected, leaving a security-hygiene gap for a widely integrated library.

Security policy

No repository security policy was found, reducing transparency about how vulnerabilities are reported and handled.

Vulnerabilities

Title	Versions	Severity
CVE-2013-5750 friendsofsymfony/user-bundle is vulnerable to Uncontrolled Resource Consumption in versions 1.2.0 - 1.2.5 and 1.3.0 - 1.3.3.	1.2.0 - 1.2.51.3.0 - 1.3.3	Medium

Package versions

Maintainers

Christophe Coevoet

Thibault Duplessis

FriendsOfSymfony Community

Direct Dependencies

Dependency	Last Release	Score
twig/twig Version ^2.13 \|\| ^3.0	—	—
symfony/form Version ^7.3	—	—
symfony/yaml Version ^7.3	—	—
symfony/config Version ^7.3	—	—
symfony/routing Version ^7.3	—	—