It includes tests, a changelog, a license, and no install-time scripts. Maintenance is concentrated in one recent contributor, and the only workflow uses an unpinned action.
76%
Total Score
67
100
88
83
One contributor made all five recent commits, leaving maintenance capacity concentrated despite the broader Symfony organization backing.
Five commits in the last three months show recent activity, but all activity came from one maintainer.
Composer build tooling is present, but no repository security scanning tools were detected; this is a modest transparency gap rather than evidence of abandonment.
Version 0.14.0 is not a prerelease and has no recent prereleases, though the pre-1.0 major version signals an API that may still evolve.
The sole workflow is fully analyzed and has no audit findings or untrusted checkout/script-injection sinks. Its only action is unpinned, which is a minor reproducibility and supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/ai-store Version ^0.14 | — | — |
symfony/ai-platform Version ^0.14 | — | — |
oskarstark/enum-helper Version ^1.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.