opscale-co/nova-comments
Recent releases, three active contributors, repository tests, and security tooling support ongoing maintenance. Organization backing and balanced contributor activity reduce abandonment risk despite the package’s short history.
68%
Total Score
100
100
100
75
Health Score Breakdown
The repository has no published security policy. This is a transparency gap for a package that handles comment content and attachment-related functionality.
The audit found a high-confidence, high-severity bot-conditions issue in auto-update.yml. All 15 action references are unpinned and two workflows grant top-level write access; the pull_request_target trigger is ordinary, but these workflow hygiene and permission issues lower supply-chain confidence.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Opscale |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/nova Version ^5.4 | — | — |
symfony/html-sanitizer Version ^7.4 | — | — |
opscale-co/nova-package-tools Version ^1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.