symfony/ai-albert-platform

Repo bus factorcaution

Two contributors are active, but one made 6 of 7 commits, or about 86%. This concentration is a maintenance caution, although Symfony organization backing provides some capacity for handoff.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and hygiene gap, not a severe health risk by itself.

Version stabilitycaution

This is a non-prerelease 0.13.0 release, but the project has not reached a stable major version. Consumers should expect greater API-change risk than with a mature 1.x package.

Workflow auditcaution

The single workflow uses pull_request_target without an untrusted checkout or script injection, and it has no top-level write permissions. However, its one action reference is unpinned, which is a minor reproducibility and supply-chain hygiene gap.