wobqqq/nova-aegis-csp
The package includes a clear README, release notes, tests in the repository, a security policy, and automated security tooling. Its release workflow passes credentials through a reusable workflow, so deployment permissions deserve review before relying on automated publishing.
68%
Total Score
50
100
94
75
Health Score Breakdown
The package and repository are consistently owned by the same individual account; this is coherent backing, though it does not provide organizational redundancy.
The package is only hours old with three releases and a median interval of about 2 hours 12 minutes, so there is not yet enough history to demonstrate durable maintenance.
No commits or active maintainers were recorded in the last three months, although six pull requests were merged in the last month and the repository was recently pushed; the conflicting evidence limits confidence in long-term cadence.
All three workflows were analyzed, use read-only permissions, and pin all 17 action references. The high-confidence medium-severity secrets-inherit finding in release.yml indicates credentials are passed more broadly than necessary.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Sergey Zakharevich |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/nova Version ^5.0 | — | — |
laravel/framework Version ^12.0 || ^13.0 | — | — |
wobqqq/nova-aegis Version ^1.1 || ^2.0 || dev-main | — | — |
Weekly Downloads
Info
- Last Published
- 1 hour ago
- Created
- 8 hours ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.