symfony-cmf/routing

Recent repository activity has stopped, and the project lacks a security policy while its three workflow actions are unpinned. Long history, tests, release notes, licensing, and organization backing provide useful counterweight.

Latest 3.0.5

Packagist

44%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Name lookalike

The package is flagged as borrowing symfony/string's identity, with an explicit lookalike match and no indication that it is a transparent fork. Consumers may have intended symfony/string instead, making this a severe supply-chain transparency risk.

Release history

The package has existed for over 14 years with 51 releases, but only 1 release in the last 12 months. Its long history supports maturity while the recent cadence suggests slower maintenance.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months. The recent release shows the project is not abandoned outright, but current maintenance activity is absent.

Repo tooling

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools were detected. The absent scanning is a modest hygiene weakness, not a standalone severe risk.

Security policy

No security policy was found in the repository. That weakens vulnerability-reporting transparency for a package used in routing infrastructure.