One registry maintainer and minimal repository popularity leave little evidence of a durable support base. Documentation, tests, licensing, security tooling, and read-only workflow permissions are reassuring; the release workflow's inherited secrets need review.
65%
Total Score
50
88
83
The package is only 0 days old with three releases, all published within roughly 5 hours. That shows active initial publishing but provides almost no long-term maintenance history.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Because the package is brand new, this may reflect limited history, but it leaves maintenance continuity unproven.
The repository has 1 star and no forks or watchers. Popularity is only supporting evidence, but these very low counts provide little independent evidence of broad adoption.
All three workflows were analyzed, use read-only permissions, and pin all 18 action references. The high-confidence medium-severity secrets-inherit finding in release.yml is a real workflow hygiene concern because credentials are passed more broadly than necessary.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/nova Version ^5.0 | — | — |
laravel/framework Version ^12.0 || ^13.0 | — | — |
wobqqq/nova-aegis Version ^1.1 || ^2.0 || dev-main | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.