The release is documented, licensed, and backed by repository tests and release notes. Maintenance is recent, though all recent commits come from one contributor and the sole workflow uses an unpinned action.
78%
Total Score
83
100
88
100
One contributor made all five commits in the last three months, creating concentration risk; organization ownership provides some handoff capacity but no second recent contributor is shown.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest repository-hygiene gap rather than evidence of unsafe code.
v0.13.0 is not a prerelease, but the 0.x major version signals that compatibility may still evolve before a stable major release.
The only workflow is fully analyzed and has no detected findings or untrusted checkout/script-injection sinks; however, its single action reference is unpinned, reducing build reproducibility.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/ai-platform Version ^0.13 | — | — |
symfony/ai-generic-platform Version ^0.13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.