symfony/ai-brave-tool

Repo bus factorcaution

All four recent commits came from one contributor, leaving the project dependent on a single active contributor despite its organization backing.

Repo commit activitycaution

Four commits occurred in the last three months, showing ongoing work, but only one active maintainer contributed during that period.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected; this is a modest transparency gap rather than evidence of unsafe code.

Version stabilitycaution

v0.13.0 is not a stable major release, so API compatibility may still change even though it is not marked as a prerelease.

Workflow auditcaution

The sole workflow uses pull_request_target without an untrusted checkout or script injection, and the audit completed cleanly. However, its one action reference is unpinned, which weakens build reproducibility.