Public methods in controller classes should only be actions
Twig templates should not contain business logic
Strong password hashing algorithm should be used for password
Boolean property should not be prefixed by "is"
Unused use statement should be avoided
Default session cookie's name should be changed.
.htaccess should be avoided
Default favicon should be changed
A route should always have a valid HTTP method
Form types should be in Form/Type folders