Package Health

getpop/commentmeta

This release shows strong ongoing maintenance evidence: it has a five-year history, 162 releases, 33 releases in the last 12 months, a stable version stream, a repository that is not archived, and recent commits. The decisive concern is that Packagist marks the package as abandoned and identifies pop-schema/commentmeta as its replacement, so new projects should depend on the replacement package rather than this name. The repository is organization-backed and clearly matches the package, but recent activity is concentrated in one contributor and there is no security policy or changelog, leaving additional maintenance and transparency concerns.

Latest 19.2.4PackagistPackagist

42%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

70

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Registry deprecationdanger

Packagist marks the package as abandoned and names pop-schema/commentmeta as its replacement. This is a severe adoption concern even though the release itself is recent.

Maintainerscaution

Only one registry publishing maintainer is listed, which is a concentration risk. The organization-backed repository provides some compensating project context, but registry publishing resilience remains limited.

Repo bus factorcaution

One contributor made all 15 commits in the last 3 months, creating a low bus factor. Organization ownership offers some handoff potential, but no second active contributor is shown.

Repo issue activitycaution

There were no new or closed issues and no pull-request activity in the last month; open issue count is unavailable. This provides little evidence of community or issue-management activity, though commit activity remains present.

Repo popularitycaution

The repository has 1 star, 0 forks, and 1 watcher. This is weak supporting evidence of adoption, but popularity alone is not decisive and does not outweigh the observed maintenance activity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Leonardo Losoviz

Direct Dependencies

DependencyLast ReleaseScore
pop-cms-schema/meta
Version ^19.2.4
—
—
pop-cms-schema/comments
Version ^19.2.4
—
—

Weekly Downloads

Info

Last Published
19 days ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform