Of those constraints, only 4.4 still has security fixes (which end this month).
Additionally, that constraint makes this package incompatible with Symfony 5, 6, or 7 projects that use http-foundation.
I suggest changing the version constraint to ~2.3 | ~3.0 | >=4.0, allowing compatibility with supported versions of symfony/http-foundation without creating a backwards-incompatible change.
litesaml/lightsaml
requiressymfony/http-foundation ~2.3|~3.0|~4.0
.Of those constraints, only 4.4 still has security fixes (which end this month).
Additionally, that constraint makes this package incompatible with Symfony 5, 6, or 7 projects that use http-foundation.
I suggest changing the version constraint to
~2.3 | ~3.0 | >=4.0
, allowing compatibility with supported versions of symfony/http-foundation without creating a backwards-incompatible change.I will make a PR.