Documentation, tests, changelog, licensing, and a security policy provide strong project transparency. The broad runtime dependency set adds integration complexity for adopters.
70%
Total Score
83
50
88
100
The package declares 19 runtime dependencies, including framework, authentication, tenancy, permissions, and WebAuthn components; this is understandable for its scope but increases integration and update complexity.
The package is 0 days old with only 2 releases, so its long-term maintenance and release stability are not yet demonstrated.
All 60 recent commits came from one contributor, which creates continuity risk; organization ownership provides some handoff capacity but no second active contributor is shown.
Composer build tooling is present, but no security scanning tool was detected, leaving a modest verification gap for an authentication package.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
nvl/core Version ^2.0 | — | — |
nvl/tenancy Version ^2.0 | — | — |
symfony/uid Version ^7.2 || ^8.0 | — | — |
nesbot/carbon Version ^2.72 || ^3.0 | — | — |
laravel/sanctum Version ^4.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.