Documentation, release notes, licensing, and security tooling are strong. The project is very new, and its release workflow inherits secrets, so production adoption warrants extra scrutiny.
70%
Total Score
100
100
93
83
The package has only three releases since its first publication earlier the same day, with releases roughly two hours apart. This shows active initial work but provides little evidence of sustained maintenance.
All three workflows were analyzed successfully, use read-only permissions, and pin all 17 action references. The high-confidence medium-severity secrets-inherit finding in release.yml is a real release-credential hygiene concern, though no untrusted checkout or script-injection sink was found.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/nova Version ^5.0 | — | — |
laravel/framework Version ^12.0 || ^13.0 | — | — |
wobqqq/nova-aegis Version ^1.1 || ^2.0 || dev-main | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.