This release shows strong ongoing maintenance evidence: it has a five-year history, 162 releases, 33 releases in the last 12 months, a stable version stream, a repository that is not archived, and recent commits. The decisive concern is that Packagist marks the package as abandoned and identifies pop-schema/commentmeta as its replacement, so new projects should depend on the replacement package rather than this name. The repository is organization-backed and clearly matches the package, but recent activity is concentrated in one contributor and there is no security policy or changelog, leaving additional maintenance and transparency concerns.
42%
Total Score
70
100
78
90
Packagist marks the package as abandoned and names pop-schema/commentmeta as its replacement. This is a severe adoption concern even though the release itself is recent.
Only one registry publishing maintainer is listed, which is a concentration risk. The organization-backed repository provides some compensating project context, but registry publishing resilience remains limited.
One contributor made all 15 commits in the last 3 months, creating a low bus factor. Organization ownership offers some handoff potential, but no second active contributor is shown.
There were no new or closed issues and no pull-request activity in the last month; open issue count is unavailable. This provides little evidence of community or issue-management activity, though commit activity remains present.
The repository has 1 star, 0 forks, and 1 watcher. This is weak supporting evidence of adoption, but popularity alone is not decisive and does not outweigh the observed maintenance activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pop-cms-schema/meta Version ^19.2.4 | — | — |
pop-cms-schema/comments Version ^19.2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.