symfony/ai-postgres-store

Repo bus factorcaution

Two contributors are active, but one accounts for five of six recent commits, so maintenance is concentrated. Organization backing partly offsets the handoff risk.

Repo popularitycaution

The repository has only two stars and one fork, indicating limited adoption evidence. Popularity is supporting evidence, so this is a minor concern rather than a health verdict.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The absence is a modest transparency gap, not evidence of unsafe code.

Version stabilitycaution

The release is not on a stable major version, but it is not a prerelease and recent releases have no prerelease share, so this is only a mild maturity consideration.

Workflow auditcaution

The single workflow has a pull_request_target trigger but no untrusted checkout or script-injection sink, and the audit completed cleanly. Its one action is unpinned, which is a minor supply-chain hygiene gap.