getpop/pages-wp

This release shows strong ongoing activity and reasonable package hygiene: it has a stable version, 162 releases since 2021, 33 releases in the last 12 months, recent repository activity, a matching source repository, a license, tests, and no install-time lifecycle scripts. However, Packagist explicitly marks the package as abandoned and identifies pop-schema/pages-wp as its replacement; that is a decisive adoption concern even though the repository remains active. The single-contributor activity and absence of security scanning or a security policy add operational risk, so new projects should depend on the replacement package rather than this abandoned name.

Latest 19.2.4

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Registry deprecation

Packagist marks the package as abandoned and provides pop-schema/pages-wp as the replacement. This is a severe dependency-maintenance concern despite the package's recent releases and active repository.

Repo bus factor

All 14 recent commits came from one contributor, giving a 100% top-contributor share. Although organization ownership provides some handoff context, the observed short-term maintenance base remains concentrated.

Repo tooling

Composer build tooling is present, but no security scanning tools are reported. The build setup is appropriate, while the missing security automation is a modest transparency and assurance gap.

Security policy

No repository security policy was found. This weakens the project's documented vulnerability-reporting process, even though the README provides an email-based security contact.