getpop/metaquery-wp

This release shows strong ongoing maintenance and reasonable package hygiene: it has 161 releases over roughly 5 years, 32 releases in the last 12 months, a stable version, tests, a license file, a small dependency surface, and recent repository activity. However, the package is explicitly marked abandoned on Packagist with a replacement package, which is a serious adoption concern despite the linked organization-owned repository being active and correctly associated with the package. Developers should prefer the stated replacement and treat this release as unsuitable for a new dependency unless compatibility constraints require it.

Latest 19.2.4

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Registry deprecation

Packagist marks the package as abandoned and identifies pop-schema/metaquery-wp as its replacement. This is a severe maintainability and adoption risk even though other signals show the source repository remains active.

Repo bus factor

All 14 recent commits came from one contributor, creating a genuine concentration risk. The organization-owned repository provides some maintenance backing, but no second active contributor is shown.

Repo popularity

The repository has 0 stars and 0 forks and only 1 watcher. Popularity is supporting evidence rather than a verdict, but these values provide little external adoption or resilience evidence.

Repo tooling

Composer is used as a build tool, which is appropriate for this PHP package, but no security scanning tools are reported. This is a transparency and defense-in-depth gap rather than evidence of unsafe behavior.