symfony/ai-weaviate-store

Repo bus factorcaution

One contributor made all five recent commits, creating a narrow individual bus factor. Symfony organization ownership provides some capacity for handoff, but no second recent contributor is shown.

Repo commit activitycaution

Five commits were made in the last three months, but all came from one active maintainer; the organization backing partly offsets the concentration.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and assurance gap.

Version stabilitycaution

The package is still on major version 0, so API stability may be lower than for a mature major release, although it is not marked as a prerelease.

Workflow auditcaution

The only workflow is fully analyzed with no detected sinks or audit findings, and its pull_request_target trigger is not dangerous on its own. Its one action reference is unpinned, which is a supply-chain hygiene gap.