- Is softspring/user-bundle a Laravel package?
- No. It is a Symfony bundle: the -bundle suffix, the bundles.php registration model, and its dependency-injection container wiring are all Symfony conventions. Its integration surface is a Symfony kernel with Doctrine ORM entity mapping and Symfony Security, not Laravel service providers, Eloquent models, or Auth guards. Treat it as a Symfony-targeted library when evaluating stack fit.
- Can I use softspring/user-bundle in a Laravel application?
- Only through custom engineering, not adoption. You would either consume the framework-agnostic PHP classes while bypassing the bundle scaffolding, or build an adapter that reimplements user persistence, auth wiring, and config loading against Laravel primitives. Both paths are a build project with no upstream support. Feasibility should be treated as low until someone confirms a concrete Laravel use case.
- How do I install softspring/user-bundle in a Symfony application?
- The conventional path is composer require softspring/user-bundle, register the bundle in bundles.php, publish the configuration, and run Doctrine migrations. Because the v5.6.0 release notes lack migration or deprecation detail, consider pinning to v5.5.10 until that release is characterised. This workflow assumes a Symfony kernel, not Laravel.
- What features does softspring/user-bundle provide?
- It supplies a configurable User entity with Doctrine mappings, repositories, account and profile management services, and Symfony Security integration. Forms, events, and configuration are extensible, and the defaults are designed to be overridden to match existing domain requirements. In short, it covers registration, profile handling, and membership features for Symfony apps.
- What changed in softspring/user-bundle v5.6.0?
- The release notes contain only a diff link comparing v5.5.10 to v5.6.0, with no changelog entries, migration notes, deprecation list, or semver rationale. The minor bump implies backwards-compatible additions under semver, but that is inference rather than evidence. Read the actual commits and pull requests before upgrading, especially since authentication, password hashing, and user lifecycle code is involved.
- Which PHP and Symfony versions does softspring/user-bundle v5.6.0 require?
- That is unverified here because the composer.json constraints for v5.6.0 were not captured in the evaluation. Any change to the PHP or Symfony version floor is a hard gate for teams on older runtimes. Record the constraints for v5.5.10 and v5.6.0 side by side before deciding to pin, upgrade, or reject.
- Does upgrading softspring/user-bundle require a Doctrine schema migration?
- Unconfirmed. It is not verified whether the Doctrine mapping changed in a way that requires a schema migration, which is the highest-cost class of change in the user domain. Before upgrading, diff the mapping files and run a Doctrine schema diff against a staging database. Do not assume a minor version bump leaves your user table untouched.
- Is softspring/user-bundle safe to use for production authentication?
- Technical risk here is high, driven by information scarcity rather than known defects. The change surface between v5.5.10 and v5.6.0 is unknown in exactly the areas this package owns: authentication paths, password hashing, role and permission resolution, and user lifecycle events. Those failure modes surface in production, not in CI. Do not upgrade production auth-adjacent code on a minor bump with an empty changelog.
- What are the Laravel alternatives to softspring/user-bundle?
- Laravel has mature, first-party-adjacent options for the same problem space, including Fortify, Breeze, and Jetstream for authentication scaffolding and membership workflows. Choosing a Symfony bundle instead creates a permanent translation layer with no upstream support. If you like this bundle's domain design, use it as a reference implementation for user modelling rather than as a dependency.
- Is softspring/user-bundle actively maintained?
- Release cadence and namespacing are consistent with a Symfony-targeted library, so the project does appear to be maintained. However, if the maintainer's release convention is a bare compare link, every future bump inherits the same audit cost. Price that recurring maintenance tax into your decision rather than treating it as a one-off.