The repository includes tests, a changelog, clear package files, and a security policy. MIT licensing and no install-time scripts are also reassuring, but this project has little proven history yet.
72%
Total Score
75
81
88
This release is from a package first published about one day ago, with three releases in that period; the rapid initial sequence provides little evidence of sustained maintenance.
No commits or active maintainers were recorded in the last three months, but the package and repository are only about one day old, so this is limited evidence rather than abandonment proof.
The repository has no stars, forks, or watchers. This is weak supporting evidence for an unestablished project, not a standalone health failure.
Composer build tooling is present, but no security scanning tool was detected; this is a modest transparency and hygiene gap for a new package.
No GitHub Actions workflows were present to audit, so there are no workflow findings; this provides no evidence of CI or release automation either.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
nvl/core Version ^2.0 | — | — |
nvl/media Version ^2.0 | — | — |
nvl/content Version ^2.0 | — | — |
nvl/tenancy Version ^2.0 | — | — |
nesbot/carbon Version ^2.72 || ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.