Package Health

naf/alexa

Alexa+ MCP integration, OAuth setup and diagnostics for NAF.

Latest v0.1.1PackagistPackagist

65%

Total Score

caution

A very new 0.1.x package has no established commit history, though tests, release notes, and organization backing reduce the risk.

Health Score Breakdown

Dependency profilecaution

Seven runtime dependencies, including framework, database, MCP, and OAuth components, create meaningful dependency surface and coordination risk for this very new package.

Release historycaution

The package is less than one day old with only two releases, although the second release followed the first after roughly 2.7 hours, showing active initial work rather than an established cadence.

Repo commit activitycaution

There were no commits or active maintainers recorded in the last three months, but the package and repository are newly created, so this is weak evidence of abandonment rather than a decisive failure.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no SECURITY.md or other security policy, reducing clarity for reporting vulnerabilities in an authentication-related integration.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Flo Knapp

Direct Dependencies

DependencyLast ReleaseScore
naf/cli
Version ^0.2.3
—
—
naf/mcp
Version ^0.2.6
—
—
naf/database
Version ^0.2.4
—
—
naf/framework
Version ^0.2.8
—
—
naf/oauth-server
Version ^0.2.5
—
—

Weekly Downloads

Info

Last Published
1 day ago
Created
1 day ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform