Package Health

getpop/custompostmedia-wp

This release shows strong ongoing maintenance and mature packaging: it has 162 releases over approximately 5 years 7 months, 33 releases in the last 12 months, a stable version, an active non-archived repository, tests, a license file, and recent commits. However, the package is explicitly marked abandoned on Packagist and has a replacement package, which is a decisive dependency risk: consumers should migrate to the stated replacement rather than adopt this package. The single-contributor activity and absent security policy add caution, but the deprecation status is the primary reason this release falls in the critical range.

Latest 19.2.4PackagistPackagist

22%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

70

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Registry deprecationdanger

Packagist marks the package as abandoned and names pop-schema/custompostmedia-wp as its replacement. This is a severe adoption risk even though other signals show the repository remains active.

Maintainerscaution

Only one registry account has publish access, which is a limited publishing base; the organization-owned repository and active commit history provide some compensating project backing.

Repo bus factorcaution

One contributor made all 14 commits in the last 3 months, creating a significant bus-factor concern. Organization backing offers some handoff potential but does not show that a second contributor is active.

Repo issue activitycaution

There are no new or closed issues and no pull-request activity in the last month, so the signal does not demonstrate active community support; the null open-issues count limits interpretation.

Repo popularitycaution

The repository has only 1 star, 0 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these values provide little external adoption signal.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Leonardo Losoviz

Direct Dependencies

DependencyLast ReleaseScore
pop-cms-schema/media-wp
Version ^19.2.4
—
—
pop-cms-schema/customposts-wp
Version ^19.2.4
—
—
pop-cms-schema/custompostmedia
Version ^19.2.4
—
—

Weekly Downloads

Info

Last Published
19 days ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform