clevyr/nova-action-button
Security documentation is absent, and the workflow uses two unpinned actions. The package is otherwise clearly licensed, tested, documented, and backed by a matching organization repository.
64%
Total Score
75
100
94
67
Health Score Breakdown
The package has eight releases over about three years, but only one release in the last 12 months and the latest release was about eight months ago. This indicates slowing maintenance, though the release history is established rather than abandoned.
The repository recorded no commits and no active maintainers in the last three months. The recent release and complete project structure provide some compensation, but current development activity is limited.
The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, though the repository does use Sonar scanning.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both referenced actions are unpinned, leaving the workflow exposed to upstream action changes.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 João Santos |
| Anthony Protano |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/nova Version ^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 8 months ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.