The release is well packaged, licensed, and backed by a maintained Symfony organization with tests in the source repository. Its pre-1.0 status and workflow pinning leave some stability and build-hygiene concerns.
73%
Total Score
83
86
100
All four recent commits came from one contributor, creating contributor-concentration risk; Symfony organization backing provides some capacity to hand off maintenance.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest supply-chain hygiene gap.
This is a non-prerelease 0.13.0 release, but the pre-1.0 major version signals that API stability may still be evolving.
The sole workflow is fully analyzed with no audit findings or untrusted checkout and script-injection sinks. Its one action reference is unpinned, which is a build-integrity hygiene concern, while the pull_request_target trigger is not risky on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/cache Version ^7.3|^8.0 | — | — |
symfony/ai-chat Version ^0.13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.