symfony/ai-supabase-store

Repo bus factorcaution

One contributor made 100% of the six recent commits, creating a concentrated maintenance dependency; organizational backing provides some handoff capacity but no second active contributor is shown.

Repo commit activitycaution

Six commits in the last three months show recent activity, but all came from one active maintainer.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency gap.

Version stabilitycaution

The release is not a prerelease, although the package remains below a stable major version, so some API evolution risk remains.

Workflow auditcaution

The single workflow uses pull_request_target without an untrusted checkout or script injection, which is acceptable on its own. However, its one action reference is unpinned, so the workflow has weaker reproducibility.