Security extension bundle
18%
Total Score
critical
Unfit to use — its name imitates symfony/security-bundle while offering little release history.
The package explicitly borrows the identity of the far more established symfony/security-bundle, with 0 monthly downloads versus 5,347,530 and no self-described fork. Although artifact overlap is low, this naming strongly suggests consumers may have wanted the established package instead.
The latest release was in July 2018, with no releases in the last 12 months and a package age of more than nine years. That indicates a long-standing maintenance and compatibility risk.
No license declaration or license file was detected, leaving consumers without clear permission to use or redistribute the package.
The artifact includes tests, which is a small positive, and an advertised README file, but the README contains no text. The empty consumer documentation is a minor usability gap for a library.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^1.12|^2.0 | — | — |
symfony/security Version ^2.8|^3.3 | — | — |
symfony/expression-language Version ^2.8|^3.3 | — | — |
symfony/dependency-injection Version ^2.8|^3.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.