symfony/ai-bundle
MIT licensing, tests, release notes, and a security policy support adoption. The bundle is explicitly experimental, and its one workflow uses an unpinned action, so expect compatibility changes and modest automation risk.
84%
Total Score
100
81
100
Health Score Breakdown
The artifact includes a README, tests, and a changelog, while this exact version has GitHub release notes. The README clearly identifies the bundle as experimental, limiting maturity expectations.
Composer build tooling is present. No security-scanning tool was detected, which is a modest transparency gap but not enough to outweigh the active project evidence.
v0.13.0 is not a stable major release, so backward compatibility is not promised. The release is not marked as a prerelease, which partly offsets the maturity concern.
The sole workflow was fully audited with no reported findings, no untrusted checkout, and no script injection. Its one action is unpinned, creating a minor reproducibility and action-integrity concern; the pull_request_target trigger is not risky without a sink.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Christopher Hertel |
| Oskar Stark |
| Symfony Community |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/clock Version ^7.3|^8.0 | — | — |
symfony/config Version ^7.3|^8.0 | — | — |
symfony/string Version ^7.3|^8.0 | — | — |
symfony/console Version ^7.3|^8.0 | — | — |
symfony/ai-platform Version ^0.13 | — | — |
Weekly Downloads
Info
- Last Published
- 24 days ago
- Created
- 9 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.