mdrbx/nova-mcp

The package has clear documentation, tests, release notes, a matching repository, and a security policy. Its framework-heavy dependency set and single-person publishing base leave less room for continuity than a mature project.

Latest v0.2.0

Packagist

67%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Dependency profile

Ten runtime dependencies, including Laravel Nova, Passport, and MCP components, create a meaningful compatibility surface. This is expected for a Nova integration but makes upgrades more involved.

Maintainers

Only one registry account has publishing access, leaving a thin publishing base and higher bus-factor risk. The linked repository and active release evidence provide some compensation.

Release history

The package is brand new, with two releases in about 47 minutes and no longer-term release record. That supports active initial work but provides little evidence of sustained maintenance.

Version stability

Version v0.2.0 is not a stable major release, so compatibility and maintenance patterns are not yet established. It is not marked as a prerelease, which partly offsets the concern.

Workflow audit

The sole workflow was fully analyzed, uses all four actions with pinned references, read-only permissions, and no untrusted checkout or script-injection findings. A high-confidence bot-conditions warning in ci.yml is a workflow hygiene concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Matthieu Deroubaix

Direct Dependencies

Dependency	Last Release	Score
laravel/mcp Version ^1.0.1	—	—
laravel/nova Version ^5.11	—	—
illuminate/auth Version ^12.41.1 \|\| ^13.0	—	—
laravel/passport Version ^13.8	—	—
illuminate/console Version ^12.41.1 \|\| ^13.0	—	—