Is symfony/contracts safe to use?

symfony/contracts has no known vulnerabilities on the latest version (v3.6.1). DepScope rates its health at 53/100 (high risk).

What is the latest version of symfony/contracts?

The latest version of symfony/contracts is v3.6.1, released 2025-07-15.

Does symfony/contracts have known vulnerabilities?

No known vulnerabilities on the latest version of symfony/contracts.

Is symfony/contracts deprecated?

No, symfony/contracts is actively maintained. Latest release: v3.6.1 (2025-07-15).

What are alternatives to symfony/contracts?

DepScope has no curated alternatives for symfony/contracts at this time.

What license does symfony/contracts use?

symfony/contracts is licensed under MIT.

symfony/contracts

composervv3.6.1

A set of abstractions extracted out of the Symfony components

License MITpermissive57 versions2 maintainers4 deps

symfony/contracts

/ 100

Health

safe to use

symfony/[email protected] is safe to use (health: 53/100)

Health breakdown0 – 100

10/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

3/15

community

Vulnerabilities

none known

OSS Scorecard

OpenSSF security posture score

4.5/10

weak

Maintainer trust

Active maintainers (3m)

7

Contributors (12m)

11

Primary author dominance

47%

GitHub stars

3,942

Health History

Dependency Tree

License Audit

Dependencies (4)

php psr/cache psr/container psr/event-dispatcher

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/composer/symfony/contracts

Last updated · 2025-07-15T17:58:03+00:00