getpop/customposts-wp

This release shows strong ongoing maintenance and maturity signals: it has a five-year release history, 33 releases in the last 12 months, a stable non-prerelease version, recent repository activity, tests, licensing, and no install-time lifecycle scripts. However, Packagist explicitly marks version 19.2.4 as abandoned and provides a replacement package, which is a severe dependency-health concern even though the repository remains active. Maintenance is also concentrated in one contributor, the repository has very low popularity, and it lacks a security policy and security-scanning tooling. Prefer the stated replacement package unless compatibility requirements require this abandoned package.

Latest 19.2.4

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Registry deprecation

Packagist marks the package as abandoned and identifies pop-schema/customposts-wp/ as its replacement. This is a severe adoption risk and outweighs the otherwise strong recent activity.

Maintainers

Only one registry account has publish access. The organization-backed repository provides some project continuity, but the registry publishing base remains concentrated.

Repo bus factor

All 14 commits in the last three months came from one contributor, producing a complete concentration of recent activity. Organization backing offers some handoff potential, but no second active contributor is shown.

Repo issue activity

There were no new issues or pull requests in the last month and no merged pull requests; this is limited evidence of community activity, although the absence of open pull requests is not itself negative.

Repo popularity

The repository has only 2 stars, 0 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these very low adoption indicators provide little external validation.