PHPackages                             contao/core-bundle - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Framework](/categories/framework)
4. /
5. contao/core-bundle

ActiveSymfony-bundle[Framework](/categories/framework)

contao/core-bundle
==================

Contao Open Source CMS

5.7.3(2mo ago)1231.6M↑15.3%5620LGPL-3.0-or-laterPHPPHP ^8.3

Since Apr 14Pushed 1mo ago38 watchersCompare

[ Source](https://github.com/contao/core-bundle)[ Packagist](https://packagist.org/packages/contao/core-bundle)[ Docs](https://contao.org)[ Fund](https://to.contao.org/donate)[ RSS](/packages/contao-core-bundle/feed)WikiDiscussions main Synced 1mo ago

READMEChangelogDependencies (278)Versions (468)Used By (20)Security (32)

Contao core bundle
==================

[](#contao-core-bundle)

[![](https://camo.githubusercontent.com/dc1f34b48ae335bd202c57510296527d03952630c6780c0d7773039d171a5f05/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f762f636f6e74616f2f636f72652d62756e646c652e7376673f7374796c653d666c61742d737175617265)](https://packagist.org/packages/contao/core-bundle)[![](https://camo.githubusercontent.com/38c3aec369c93031d7ba6ff9cf2422532968224b517c49b3cd78c35fd89e0241/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f64742f636f6e74616f2f636f72652d62756e646c652e7376673f7374796c653d666c61742d737175617265)](https://packagist.org/packages/contao/core-bundle)

Contao is an Open Source PHP Content Management System for people who want a professional website that is easy to maintain. Visit the [project website](https://contao.org) for more information.

Contao has been designed as a [Symfony](https://symfony.com) bundle, which can be used to add CMS functionality to any Symfony application. If you do not have an existing Symfony application yet, we recommend using the [Contao managed edition](https://github.com/contao/managed-edition)as basis for your application.

Prerequisites
-------------

[](#prerequisites)

The Contao core bundle has a recipe in the [symfony/recipes-contrib](https://github.com/symfony/recipes-contrib) repository. Be sure to either enable contrib recipes for your project by running the following command or follow the instructions to use the contrib recipe during the installation process.

```
composer config extra.symfony.allow-contrib true

```

Add the `contao-component-dir` to the `extra` section of your `composer.json` file.

```
composer config extra.contao-component-dir assets

```

Installation
------------

[](#installation)

Install Contao and all its dependencies by executing the following command:

```
composer require \
    contao/core-bundle:4.8.* \
    php-http/guzzle6-adapter:^1.1

```

Note that you can exchange the `php-http/guzzle6-adapter` package with any other [HTTP client implementation](https://packagist.org/providers/php-http/client-implementation). If you already have an HTTP client implementation, you can omit the package entirely.

Configuration
-------------

[](#configuration)

Configure the `DATABASE_URL` in your environment, either using environment variables or by using the [Dotenv component](http://symfony.com/doc/current/components/dotenv.html).

Enable ESI in the `config/packages/framework.yaml` file.

```
framework:
    esi: true
```

Add the Contao routes to your `config/routing.yaml` file, and be sure to load the `ContaoCoreBundle` at the very end, so the catch-all route does not catch your application routes.

```
ContaoCoreBundle:
    resource: "@ContaoCoreBundle/config/routes.yaml"
```

Edit your `config/security.yaml` file and merge all the `providers`, `encoders`, `firewalls` and `access_control`sections:

```
security:
    password_hashers:
        Contao\User: auto
        Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface: auto

    providers:
        contao.security.backend_user_provider:
            id: contao.security.backend_user_provider

        contao.security.frontend_user_provider:
            id: contao.security.frontend_user_provider

    firewalls:
        contao_backend:
            request_matcher: contao.routing.backend_matcher
            provider: contao.security.backend_user_provider
            user_checker: contao.security.user_checker
            switch_user: true
            login_throttling: ~
            webauthn:
                authentication:
                    enabled: true
                    profile: contao_backend
                    routes:
                        options_path: /_contao/login/webauthn/options
                        result_path: /_contao/login/webauthn/result

            login_link:
                check_route: contao_backend_login_link
                signature_properties: [username, lastLogin]
                success_handler: contao.security.authentication_success_handler

            contao_login:
                remember_me: false

            logout:
                path: contao_backend_logout

        contao_frontend:
            request_matcher: contao.routing.frontend_matcher
            provider: contao.security.frontend_user_provider
            user_checker: contao.security.user_checker
            access_denied_handler: contao.security.access_denied_handler
            switch_user: false
            login_throttling: ~

            contao_login:
                remember_me: true

            remember_me:
                secret: '%kernel.secret%'
                remember_me_parameter: autologin
                token_provider:
                    doctrine: true

            logout:
                path: contao_frontend_logout

    access_control:
        - { path: ^%contao.backend.route_prefix%/login$, roles: PUBLIC_ACCESS }
        - { path: ^%contao.backend.route_prefix%/logout$, roles: PUBLIC_ACCESS }
        - { path: ^%contao.backend.route_prefix%(/|$), roles: ROLE_USER }
        - { path: ^/, roles: [PUBLIC_ACCESS] }
```

The Contao core-bundle is now installed and activated. Use the `contao:migrate` command to upgrade the database and the `contao:user:create` command to create your first back end user.

License
-------

[](#license)

Contao is licensed under the terms of the LGPLv3.

Getting support
---------------

[](#getting-support)

Visit the [support page](https://to.contao.org/support) to learn about the available support options.

###  Health Score

78

—

ExcellentBetter than 100% of packages

Maintenance89

Actively maintained with recent releases

Popularity57

Moderate usage in the ecosystem

Community60

Healthy contributor diversity

Maturity98

Battle-tested with a long release history

 Bus Factor1

Top contributor holds 72.4% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~8 days

Total

467

Last Release

52d ago

Major Versions

4.13.54 → 5.5.62025-03-18

4.13.55 → 5.3.372025-08-13

4.13.56 → 5.3.392025-09-04

4.13.57 → 5.6.52025-11-25

4.13.58 → 5.3.432025-11-26

PHP version history (13 changes)4.0.0-beta1PHP &gt;=5.4.0

4.1.3PHP &gt;=5.5.0

4.4.0-beta1PHP &gt;=5.6.0

4.4.1PHP ^5.6|^7.0

4.5.0-beta1PHP ^7.1

4.4.18PHP ^5.6 || ^7.0

4.9.0-RC1PHP ^7.2

4.9.10PHP ^7.2 || ^8.0

4.11.0-RC1PHP ^7.3 || ^8.0

4.13.0-RC1PHP ^7.4 || ^8.0

5.0.0-RC1PHP ^8.1

5.5.0-RC1PHP ^8.2

5.7.0-RC1PHP ^8.3

### Community

Maintainers

![](https://www.gravatar.com/avatar/3de3a0dd7c29df679eb280585220c17c1a7340b46c2792d5e8298be859acfbba?d=identicon)[leofeyer](/maintainers/leofeyer)

![](https://www.gravatar.com/avatar/8c7bdddffcaec444b7891b633f45fe2713d2b04ff21a6362fd748720d0822d58?d=identicon)[ausi](/maintainers/ausi)

---

Top Contributors

[![leofeyer](https://avatars.githubusercontent.com/u/1192057?v=4)](https://github.com/leofeyer "leofeyer (13030 commits)")[![aschempp](https://avatars.githubusercontent.com/u/1073273?v=4)](https://github.com/aschempp "aschempp (1271 commits)")[![ausi](https://avatars.githubusercontent.com/u/367169?v=4)](https://github.com/ausi "ausi (891 commits)")[![Toflar](https://avatars.githubusercontent.com/u/481937?v=4)](https://github.com/Toflar "Toflar (747 commits)")[![fritzmg](https://avatars.githubusercontent.com/u/4970961?v=4)](https://github.com/fritzmg "fritzmg (561 commits)")[![m-vo](https://avatars.githubusercontent.com/u/5305677?v=4)](https://github.com/m-vo "m-vo (388 commits)")[![zoglo](https://avatars.githubusercontent.com/u/55794780?v=4)](https://github.com/zoglo "zoglo (193 commits)")[![tristanlins](https://avatars.githubusercontent.com/u/343404?v=4)](https://github.com/tristanlins "tristanlins (161 commits)")[![bytehead](https://avatars.githubusercontent.com/u/754921?v=4)](https://github.com/bytehead "bytehead (156 commits)")[![discordier](https://avatars.githubusercontent.com/u/940331?v=4)](https://github.com/discordier "discordier (107 commits)")[![qzminski](https://avatars.githubusercontent.com/u/193483?v=4)](https://github.com/qzminski "qzminski (100 commits)")[![xchs](https://avatars.githubusercontent.com/u/1218766?v=4)](https://github.com/xchs "xchs (89 commits)")[![lukasbableck](https://avatars.githubusercontent.com/u/42083846?v=4)](https://github.com/lukasbableck "lukasbableck (35 commits)")[![dmolineus](https://avatars.githubusercontent.com/u/1186266?v=4)](https://github.com/dmolineus "dmolineus (30 commits)")[![bezin](https://avatars.githubusercontent.com/u/4400435?v=4)](https://github.com/bezin "bezin (27 commits)")[![richardhj](https://avatars.githubusercontent.com/u/1284725?v=4)](https://github.com/richardhj "richardhj (26 commits)")[![rabauss](https://avatars.githubusercontent.com/u/14016098?v=4)](https://github.com/rabauss "rabauss (26 commits)")[![psi-4ward](https://avatars.githubusercontent.com/u/1191572?v=4)](https://github.com/psi-4ward "psi-4ward (24 commits)")[![marcobiedermann](https://avatars.githubusercontent.com/u/5244986?v=4)](https://github.com/marcobiedermann "marcobiedermann (22 commits)")[![SeverinGloeckle](https://avatars.githubusercontent.com/u/1193129?v=4)](https://github.com/SeverinGloeckle "SeverinGloeckle (20 commits)")

---

Tags

cmscontaocorephpsymfonysymfony-bundle

###  Code Quality

TestsPHPUnit

### Embed Badge

![Health badge](/badges/contao-core-bundle/health.svg)

```
[![Health](https://phpackages.com/badges/contao-core-bundle/health.svg)](https://phpackages.com/packages/contao-core-bundle)
```

###  Alternatives

[contao/contao

Contao Open Source CMS development package

42114.3k](/packages/contao-contao)[sulu/sulu

Core framework that implements the functionality of the Sulu content management system

1.3k1.3M152](/packages/sulu-sulu)[sylius/sylius

E-Commerce platform for PHP, based on Symfony framework.

8.4k5.6M651](/packages/sylius-sylius)[shopware/platform

The Shopware e-commerce core

3.3k1.5M3](/packages/shopware-platform)[shopware/core

Shopware platform is the core for all Shopware ecommerce products.

595.2M386](/packages/shopware-core)[open-dxp/opendxp

Content &amp; Product Management Framework (CMS/PIM)

7310.3k29](/packages/open-dxp-opendxp)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)
