Documentation and packaging are in good shape, with a license, tests in the repository, and release notes. Maintenance is concentrated in one contributor, and the sole workflow uses an unpinned action.
68%
Total Score
67
90
83
One contributor made all four commits in the last three months. Organization backing provides some handoff capacity, but no second recent contributor is visible in the collected activity.
The repository recorded four commits in the last three months, showing recent activity, but all activity is concentrated in one active maintainer.
The release is not a stable-major version, so APIs may still change, although it is not marked prerelease and recent prereleases account for none of the observed releases.
The only workflow uses pull_request_target without an untrusted checkout or script-injection sink, and the audit completed cleanly. However, its sole action reference is unpinned, weakening build reproducibility.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/ai-platform Version ^0.14 | — | — |
symfony/http-client Version ^7.3|^8.0 | — | — |
symfony/ai-generic-platform Version ^0.14 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.