Package Health

symfony/json-path

Clear documentation, tests, licensing, and recent release notes support dependable use. Recent repository work is concentrated in one contributor, though organization backing reduces the handoff risk.

Latest v8.1.2PackagistPackagist

86%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

83

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Are you affected? Scan for Free

Health Score Breakdown

Repo bus factorcaution

All three recent commits came from one contributor, creating a concentrated short-term bus factor. Organization backing provides some handoff capacity, so this is a caution rather than a severe abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a minor transparency gap, offset by the repository's documented security policy.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-10877
symfony/json-path is vulnerable to Regular Expression Denial of Service (ReDoS) in versions 7.3.0 - 7.4.11 and 8.0.0 - 8.0.11.
7.3.0 - 7.4.118.0.0 - 8.0.11
Medium

Package versions

Maintainers

Alexandre Daubois
Symfony Community

Direct Dependencies

DependencyLast ReleaseScore
symfony/polyfill-ctype
Version ^1.8
symfony/polyfill-mbstring
Version ^1.0

Weekly Downloads

Info

Last Published
1 month ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform