Package Health/tyhpdef/symfony-http-foundation

tyhpdef/symfony-http-foundation

The package is well documented for a small Composer metapackage, with matching repository ownership and a clear license. Its maintenance record is too short to establish durability, and the repository has no security policy or scanning tooling.

Latest 8.1.7

Packagist

61%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is newly published: it has only 2 releases and is 0 days old, so there is not enough release history to establish sustained maintenance.

Repo commit activity

The repository records 0 commits and 0 active maintainers over the last 3 months. Because the project is newly published, this is mainly an unproven maintenance record rather than evidence of long-term abandonment, but it limits confidence.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. For a newly published package, this leaves a modest transparency and maintenance gap.

Security policy

The linked repository has no security policy. This is a hygiene gap for reporting and handling vulnerabilities, though it is not by itself evidence that the package is unsafe.