symfony/ai-decart-platform

Repo bus factorcaution

One contributor made all five commits in the last three months, which creates concentration risk; Symfony organizational ownership provides some capacity to hand maintenance off, but no second recent contributor is shown.

Repo commit activitycaution

Five commits in the last three months show recent activity, but all came from one active maintainer, leaving limited recent redundancy.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The repository's separate security policy partly offsets this tooling gap.

Version stabilitycaution

This is a non-prerelease release, although the package remains below major version 1, so its API maturity may still be evolving.

Workflow auditcaution

The sole workflow is fully analyzed and has no detected injection or other audit findings, but its one action reference is unpinned. The pull_request_target trigger is ordinary here because no untrusted checkout or script-injection sink was found.