symfony/ai-serp-api-tool

Repo bus factorcaution

All four commits in the last three months came from one contributor, so maintenance depends heavily on a single active person. Symfony organization backing partly offsets handoff risk but does not remove the concentration.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Version stabilitycaution

This is a non-prerelease 0.x release, but the pre-1.0 version indicates the API may still evolve.

Workflow auditcaution

The only workflow uses a pull_request_target trigger without an untrusted checkout or script-injection sink, and it has no top-level write permissions. However, its one action reference is unpinned, which weakens build reproducibility.