opscale-co/nova-mcp

The project has an organization behind it, a real README, tests, release notes, security scanning, and a matching repository. Maintenance has already gone quiet, while workflow permissions, unpinned actions, and a high-confidence bot-condition finding add practical supply-chain concerns.

Latest 1.2.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

A post-autoload-dump install lifecycle script runs during Composer installation, which adds execution surface for consumers even though no unsafe behavior is shown here.

Release history

The package is young, with five releases concentrated in its first year and a median interval of about 49 minutes, so its long-term maintenance record is still limited.

Repo commit activity

There were no commits and no active maintainers in the most recent three months, a concrete sign that maintenance has currently stalled despite the repository not being archived.

Repo issue activity

No issues or pull requests were opened or closed in the last month. With no commit activity either, this provides little evidence of ongoing community or maintainer interaction.

Repo popularity

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any audience provides no external maturity signal.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Opscale

Direct Dependencies

Dependency	Last Release	Score
laravel/mcp Version ^0.5.1	—	—
opscale-co/actions Version ^1.0	—	—
butschster/dbml-parser Version ^0.3.0	—	—
spatie/laravel-query-builder Version ^6.3	—	—
opscale-co/nova-package-tools Version ^1.0	—	—