symfony/string

Healthy and suitable to depend on. It has frequent releases, active contributions from six people, matching Symfony repository ownership, tests, licensing, and no deprecation or install scripts; security scanning is the main transparency gap.

Latest v8.1.7

Packagist

93%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

100

Are you affected? Scan for Free

Health Score Breakdown

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-10961 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. symfony/string is vulnerable to Deserialization of Untrusted Data in versions 7.4.0 - 7.4.11 and 8.0.0 - 8.0.11.	7.4.0 - 7.4.118.0.0 - 8.0.11	High

Package versions

Maintainers

Nicolas Grekas

Symfony Community

Direct Dependencies

Dependency	Last Release	Score
symfony/polyfill-ctype Version ^1.8	—	—
symfony/polyfill-mbstring Version ^1.0	—	—
symfony/polyfill-intl-grapheme Version ^1.33	—	—
symfony/polyfill-intl-normalizer Version ^1.0	—	—