Adds support to autowire controller constructor without pain.
15%
Total Score
critical
Unfit to use: the package is deprecated and has had no registry releases since 2017.
Packagist marks the entire package as abandoned and lists symfony/dependency-injection as a replacement, which is a severe adoption warning.
The package has had no releases in the last 12 months, and its latest release was in April 2017, indicating long-term abandonment risk.
The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the package's abandonment risk.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented; this adds a transparency concern for a maintained dependency, though it does not outweigh the deprecation evidence.
The assessed release is a prerelease (v2.0.0-RC2), adding stability risk to an already inactive package.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^3.2 | — | — |
symfony/config Version ^3.2 | — | — |
symfony/security Version ^3.2 | — | — |
nette/robot-loader Version ^3.0 | — | — |
symfony/serializer Version ^3.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.