getpop/postmeta-wp
This release is actively maintained and has substantial release history, a clear GPL license, tests, and an unarchived organization-owned repository. However, the registry explicitly marks it abandoned and identifies getpop/custompostmeta-wp as the replacement, making this package a poor dependency choice despite current repository activity. Maintenance is also concentrated in one contributor, the repository does not clearly mention or match the package, and there is no repository security policy or security-scanning tooling. Depend on the replacement package instead unless compatibility constraints require this abandoned name.
22%
Total Score
67
72
90
Health Score Breakdown
Packagist marks the package abandoned and provides getpop/custompostmeta-wp as its replacement. This is a severe dependency-maintenance risk even though other signals show recent activity.
One contributor made 100% of the 16 commits in the last 3 months. Although the repository is organization-owned, no second active contributor is shown, leaving a meaningful continuity risk.
The repository recorded 16 commits in the last 3 months, showing current activity; however, all activity came from one maintainer, limiting the strength of this compensation.
The repository name does not match the package name and its README does not mention the package, so the linkage is not clearly established and the package may be relying on a broader or different repository.
The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence and the organization backing prevents this from being decisive, but it provides little external validation.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Leonardo Losoviz |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 pop-cms-schema/metaquery-wp Version ^19.2.4 | — | — |
pop-cms-schema/custompostmeta Version ^19.2.4 | — | — |
pop-cms-schema/customposts-wp Version ^19.2.4 | — | — |
Weekly Downloads
Info
- Last Published
- 14 days ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.