Clear documentation, tests, release notes, and a recent release cadence support adoption. Maintenance is concentrated in one contributor, while Symfony organization backing reduces—but does not remove—the continuity concern.
72%
Total Score
83
92
All five recent commits came from one contributor. Symfony organization backing provides some handoff capacity, but recent maintenance still has a concentrated bus factor.
This is a stable, non-prerelease 0.13.0 release, although the pre-1.0 major version means compatibility may still change more than in a mature 1.x package.
The only workflow was fully analyzed with no audit findings and no untrusted checkout or script-injection sinks. Its single action reference is unpinned, a minor reproducibility concern, while the pull_request_target trigger is not risky on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/uid Version ^7.3|^8.0 | — | — |
symfony/ai-store Version ^0.13 | — | — |
symfony/ai-platform Version ^0.13 | — | — |
oskarstark/enum-helper Version ^1.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.