symfony/ux-toolkit

Active releases, recent repository work, and nine contributors show ongoing maintenance. MIT licensing, organization backing, tests in the repository, and a security policy add useful transparency.

Latest v3.5.1

Packagist

84%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

100

Are you affected? Scan for Free

Health Score Breakdown

Package scaffolding

The artifact includes a README and changelog, while repository tests and a GitHub release process provide project-level documentation. However, the README explicitly labels the component experimental and gives no backward-compatibility guarantee, which raises adoption risk.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The security policy partly compensates, though automated detection coverage is not demonstrated.

Vulnerabilities

Title	Versions	Severity
CVE-2026-55878 symfony/ux-toolkit is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 2.32.0 - 2.36.1 and 3.0.0 - 3.2.0.	2.32.0 - 2.36.13.0.0 - 3.2.0	High

Package versions

Maintainers

Symfony Community

Hugo Alliaume

Jean-François Lépine

Simon André

Direct Dependencies

Dependency	Last Release	Score
twig/twig Version ^3.29\|^4.0	—	—
symfony/yaml Version ^7.4\|^8.0	—	—
symfony/string Version ^7.4\|^8.0	—	—
symfony/console Version ^7.4\|^8.0	—	—
symfony/filesystem Version ^7.4\|^8.0	—	—