Symfony HttpFoundation is a production-grade PHP library that implements an object-oriented layer for the HTTP specification. It provides the core abstractions for HTTP request/response handling, including Request, Response, RedirectResponse, JsonResponse, StreamedResponse, BinaryFileResponse, and EventStreamResponse. It also covers header and parameter containers, cookie parsing and serialization, file uploads, session management with multiple storage backends, IP validation and anonymization, content negotiation, request matchers, URI signing, rate limiting, and streaming JSON output. This is not an application or service; it is a library component consumed by the Symfony framework and standalone PHP projects, with no executable entry points or web endpoints. Architecturally, the code is organized around small, focused classes with clear separation of concerns: bag containers for parameters/headers, decorators and proxies for session handlers, immutable-ish value objects like Cookie, and static utility classes such as IpUtils and HeaderUtils. The component relies on modern PHP (>=8.4.1), optional integrations with Redis, Memcached, MongoDB, PDO/Doctrine DBAL, and Symfony Cache/Mime contracts. The test suite is extensive, covering both unit behavior and real HTTP functional scenarios against PHP's built-in server. The library demonstrates strong craftsmanship: type-safe getters, fluent builders, robust RFC-aware parsing utilities, and consistent deprecation policies. The most reusable pieces are self-contained utilities and value objects that can be extracted into other projects with minimal modification. Maintenance is active, with recent commits and a clear 8.2 branch; technical drift is low despite the long history because deprecations are systematically managed and PHP/Symfony versions are current.
nette/http is a standalone PHP library providing HTTP abstraction for request/response handling, URL manipulation, session management, and file uploads. It is part of the Nette Framework ecosystem but is usable independently. The library offers immutable `Request` and `UrlImmutable` objects for safe processing, alongside mutable `Response` and `Session` for stateful operations. It includes security-focused features such as input sanitization, CSRF protection via `Sec-Fetch-*` headers (with fallback), SSRF protection via `UrlValidator` and `IPAddress`, and a proxy trust model for client IP resolution behind reverse proxies. The codebase is well-structured, with clear separation of concerns, comprehensive test coverage (Nette Tester), and strict static analysis (PHPStan level 8). It requires PHP 8.3-8.5 and depends on `nette/utils`. The repository is actively maintained with recent commits, CI on multiple OSes, and an issue tracker.