The three active contributors and regular releases support continued maintenance. One contributor makes most commits, while the experimental 0.x status means compatibility can change.
82%
Total Score
83
93
50
Three contributors are active, but one accounts for 9 of 11 recent commits, leaving maintenance activity substantially concentrated.
The release is not prerelease, but it remains below 1.0 and the package is explicitly experimental, so compatibility may change between releases.
The only workflow was fully analyzed with no audit findings or untrusted checkout and script-injection sinks. Its pull_request_target trigger is ordinary, but its single action reference is unpinned, which is a minor reproducibility concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
symfony/uid Version ^7.3|^8.0 | — | — |
symfony/clock Version ^7.3|^8.0 | — | — |
symfony/ai-platform Version ^0.13 | — | — |
symfony/http-client Version ^7.3|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.