Alexa+ MCP integration, OAuth setup and diagnostics for NAF.
65%
Total Score
caution
A very new 0.1.x package has no established commit history, though tests, release notes, and organization backing reduce the risk.
Seven runtime dependencies, including framework, database, MCP, and OAuth components, create meaningful dependency surface and coordination risk for this very new package.
The package is less than one day old with only two releases, although the second release followed the first after roughly 2.7 hours, showing active initial work rather than an established cadence.
There were no commits or active maintainers recorded in the last three months, but the package and repository are newly created, so this is weak evidence of abandonment rather than a decisive failure.
Composer build tooling is present, but no security scanning tool was detected, leaving a modest transparency and maintenance gap.
The repository has no SECURITY.md or other security policy, reducing clarity for reporting vulnerabilities in an authentication-related integration.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
naf/cli Version ^0.2.3 | — | — |
naf/mcp Version ^0.2.6 | — | — |
naf/database Version ^0.2.4 | — | — |
naf/framework Version ^0.2.8 | — | — |
naf/oauth-server Version ^0.2.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.