A Laravel SDK for Nova Systems EDI integration.
68%
Total Score
caution
Usable with caveats: early release history and all recent commits coming from one contributor limit confidence.
The package is about 10 months old with only two releases and a median interval of about 126 days. That provides limited evidence of sustained release maintenance.
One contributor made all seven commits in the last three months, creating a meaningful continuity risk. Organization backing partly compensates because maintenance can potentially be handed off.
Version 0.0.2 is not a stable major release, indicating an early API with greater compatibility risk for dependents.
All five workflows were analyzed, all 11 action references are pinned, and no untrusted checkout or script-injection path was found. A high-confidence bot-conditions finding in the Dependabot auto-merge workflow, plus top-level write permissions in two workflows, warrants a hygiene caution rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
saloonphp/saloon Version ^4.0 | — | — |
spatie/laravel-data Version ^4.18 | — | — |
illuminate/contracts Version ^11.0||^12.0||^13.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.