abordage/nova-html-card
Clear documentation, licensing, and a small dependency surface reduce adoption friction. The long release gap and quiet recent commit history limit confidence, while workflow hygiene issues add some maintenance risk.
64%
Total Score
50
100
94
100
Health Score Breakdown
The package has eight releases since July 2022, but none in the last 12 months; this is a meaningful sign of slowing delivery for a maintained integration package.
There were zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance despite the repository not being archived.
All six action references are unpinned, and the audit reports high-confidence bot-condition and unpinned-image findings. The pull-request target workflow has broad write permissions, but no untrusted checkout or script-injection sink was found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Pavel Bychko |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/nova Version ^4.0 || ^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.