symfony/ai-ollama-platform

Dangerous workflowscaution

One workflow uses pull_request_target, which can require careful handling of untrusted pull requests even though no untrusted checkout or script injection was detected.

Repo bus factorcaution

One contributor made all six commits in the last three months, creating concentration risk; Symfony organization backing provides some capacity to hand off maintenance.

Repo issue activitycaution

No new or closed issues or pull requests were recorded in the last month, but the open issue and pull-request totals are unknown, so this provides limited activity evidence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest security-process gap.

Token permissionscaution

The only analyzed workflow lacks top-level token permissions. It declares no top-level write access, but explicit least-privilege settings would provide stronger assurance.