A single contributor made all five recent commits, and the only workflow uses an unpinned action. Organization backing, repository tests, release notes, and a clear license provide useful safeguards.
81%
Total Score
67
90
100
One contributor made 100% of the five recent commits, creating a meaningful continuity risk despite the repository being owned by an organization.
Five commits were made in the last three months, showing recent work, though all activity came from one active maintainer.
Version 0.13.0 is not a stable major release, but it is not marked as a prerelease and recent releases contain no prereleases.
The single workflow has no untrusted checkout or script-injection findings, but its one action reference is unpinned, leaving avoidable build reproducibility risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/ai-agent Version ^0.13 | — | — |
symfony/ai-store Version ^0.13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.