symfony/ai-cartesia-platform

Repo bus factorcaution

All four recent commits came from one contributor, concentrating short-term maintenance responsibility. Organization backing provides some ability to hand work off, but no second recent contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence of unsafe code.

Version stabilitycaution

This is a non-prerelease v0.14.0, but the package has not reached a stable major version. Consumers should expect some API evolution, though the release history shows consistent development.

Workflow auditcaution

The only workflow is fully analyzed and has no audit findings or untrusted checkout or script-injection sinks. However, its single action reference is unpinned, which is a small supply-chain hygiene gap; the pull_request_target trigger is ordinary without a dangerous sink.