I noticed in certain areas (https://github.com/easy-cloud/acl/blob/master/src/Controller/GroupController.php first place I looked....) you are not following all the PSR standards. While it is not required, it is recommended if you seek adoption in enterprise projects. (Just my two cents).