The package includes its license, repository tests, release notes, and no install-time scripts. Its small user base and one active contributor mean future fixes may depend heavily on a single person.
78%
Total Score
83
100
86
100
One contributor made all five commits in the last 3 months, creating a real continuity risk. Symfony organization backing provides some capacity for handoff, but no second recent contributor is shown.
The repository has 1 star and no forks or watchers. This is weak supporting evidence of adoption, but popularity alone does not outweigh the active release history and organization backing.
Version v0.13.0 is not a prerelease, but the package remains below a stable major version. That adds compatibility uncertainty without indicating abandonment.
The only workflow uses a pull_request_target trigger without an untrusted checkout or script injection, and the audit found no findings. Its sole action reference is unpinned, which is a modest supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/ai-platform Version ^0.13 | — | — |
symfony/http-client Version ^7.3|^8.0 | — | — |
symfony/ai-meta-platform Version ^0.13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.