It includes a clear MIT license, repository tests, release notes, and a security policy. The workflow audit found no dangerous findings, but its sole action reference is unpinned.
76%
Total Score
67
93
83
One contributor made all six commits in the last three months, creating a thin active contributor base; organization ownership provides some handoff capacity but does not remove the concentration concern.
Six commits were made in the last three months, showing recent work, though activity is concentrated in one active maintainer.
Version 0.14.0 is not a stable major release, so its API may still change, although it is not marked as a prerelease and recent releases are consistent.
The only workflow uses pull_request_target without an untrusted checkout or script-injection sink, and the audit found no findings. However, its only action reference is unpinned, leaving a modest reproducibility and action-integrity gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/uid Version ^7.3|^8.0 | — | — |
symfony/ai-store Version ^0.14 | — | — |
symfony/ai-platform Version ^0.14 | — | — |
symfony/http-client Version ^7.3|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.