devuri/cpt-meta-box

The clear README, license, release notes, repository tests, and minimal runtime dependencies make integration and provenance straightforward. Maintenance has been inactive for about 20 months, with one registry maintainer, very little community adoption, no security policy, and an unpinned workflow action.

Latest v0.5.3

Packagist

61%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were no commits and no active maintainers in the three months before collection. Combined with the older latest release, this indicates a real maintenance and abandonment risk.

Maintainers

Only one registry account has publish access. This is a thin publishing base and increases continuity risk, although the repository shows a matching individual owner rather than unexplained ownership.

Project backing

The registry namespace and repository owner match, and the owner is an individual rather than an organization. This gives consistent ownership context but does not provide organizational continuity.

Release history

The package has 19 releases since March 2021, but its latest registry release was in January 2025 and there were no releases in the following 12 months. This is meaningful evidence of slowing maintenance for a library dependency.

Repo popularity

The repository has 2 stars, no forks, and 1 watcher. Popularity is only supporting evidence, but these very small numbers provide little evidence of broad review or community support.