Package Health

wobqqq/nova-aegis-admin-ip-access

One registry maintainer and minimal repository popularity leave little evidence of a durable support base. Documentation, tests, licensing, security tooling, and read-only workflow permissions are reassuring; the release workflow's inherited secrets need review.

Latest v1.1.0PackagistPackagist

65%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historycaution

The package is only 0 days old with three releases, all published within roughly 5 hours. That shows active initial publishing but provides almost no long-term maintenance history.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Because the package is brand new, this may reflect limited history, but it leaves maintenance continuity unproven.

Repo popularitycaution

The repository has 1 star and no forks or watchers. Popularity is only supporting evidence, but these very low counts provide little independent evidence of broad adoption.

Workflow auditcaution

All three workflows were analyzed, use read-only permissions, and pin all 18 action references. The high-confidence medium-severity secrets-inherit finding in release.yml is a real workflow hygiene concern because credentials are passed more broadly than necessary.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Sergey Zakharevich

Direct Dependencies

DependencyLast ReleaseScore
laravel/nova
Version ^5.0
—
—
laravel/framework
Version ^12.0 || ^13.0
—
—
wobqqq/nova-aegis
Version ^1.1 || ^2.0 || dev-main
—
—

Weekly Downloads

Info

Last Published
2 hours ago
Created
10 hours ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform