It includes tests, a matching source repository, and no install-time scripts. The MIT license and lack of registry deprecation help, but its own README says it is not ready for use and the project offers no security policy.
38%
Total Score
0
58
75
The package includes a README and tests, but the README explicitly says it is still under construction and not ready for use. Tests provide some compensation, but the warning is directly relevant to adoption.
The latest release was about two years ago, and there were no releases in the last 12 months. That is strong evidence of stalled maintenance for a package that consumers may need to rely on.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving little evidence of current maintenance capacity.
The repository name matches the package, which supports the linkage, but the README does not mention the package name. That leaves a minor uncertainty about how clearly the source documents this package.
No security policy was found, reducing transparency for reporting and handling problems. This is a genuine but secondary maintenance concern rather than evidence of malicious behavior.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
manogi/nova-tiptap Version ^2.0 | — | — |
joshmoreno/nova-html-field Version ^0.1.0 | — | — |
owenmelbz/nova-radio-field Version ^1.0 | — | — |
kraenkvisuell/nova-sortable Version ^3.1.3 | — | — |
timothyasp/nova-color-field Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.