This release shows strong ongoing maintenance and mature packaging: it has 162 releases over approximately 5 years 7 months, 33 releases in the last 12 months, a stable version, an active non-archived repository, tests, a license file, and recent commits. However, the package is explicitly marked abandoned on Packagist and has a replacement package, which is a decisive dependency risk: consumers should migrate to the stated replacement rather than adopt this package. The single-contributor activity and absent security policy add caution, but the deprecation status is the primary reason this release falls in the critical range.
22%
Total Score
70
100
78
90
Packagist marks the package as abandoned and names pop-schema/custompostmedia-wp as its replacement. This is a severe adoption risk even though other signals show the repository remains active.
Only one registry account has publish access, which is a limited publishing base; the organization-owned repository and active commit history provide some compensating project backing.
One contributor made all 14 commits in the last 3 months, creating a significant bus-factor concern. Organization backing offers some handoff potential but does not show that a second contributor is active.
There are no new or closed issues and no pull-request activity in the last month, so the signal does not demonstrate active community support; the null open-issues count limits interpretation.
The repository has only 1 star, 0 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these values provide little external adoption signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pop-cms-schema/media-wp Version ^19.2.4 | — | — |
pop-cms-schema/customposts-wp Version ^19.2.4 | — | — |
pop-cms-schema/custompostmedia Version ^19.2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.