getpop/posts

This release is actively maintained and mature, with 162 releases over roughly 5 years, 33 releases in the last 12 months, a stable non-prerelease version, recent repository pushes, and 15 commits in the last 3 months. The package is licensed, includes tests and a substantial source tree, has no install-time lifecycle scripts, and its repository clearly matches the package. However, Packagist marks it abandoned and identifies `pop-schema/posts` as the replacement, which creates a meaningful adoption and continuity concern even though the linked organization-owned repository remains active. Maintenance is also concentrated in one contributor, and the repository has no security scanning or security policy. Dependence is plausible if the replacement package is not yet suitable, but new projects should prefer the stated replacement and verify its compatibility.

Latest 19.2.4

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Registry deprecation

Packagist marks the package as abandoned and names `pop-schema/posts` as its replacement. This is a severe transparency and continuity warning for new dependents, although active releases and repository activity provide partial evidence that the code is still maintained.

Repo bus factor

One contributor made all 15 commits in the last 3 months, creating a low bus factor. The organization-owned repository provides some ability to hand off maintenance, but no second active contributor is evidenced.

Repo issue activity

There were no new issues or pull requests and no merged pull requests in the last month. This is not necessarily negative for a small stable component, but it provides limited evidence of a broader maintenance community.

Repo popularity

The repository has 2 stars, 0 forks, and 1 watcher. Low popularity is only supporting evidence and does not outweigh the demonstrated release and commit activity, but it provides little external corroboration.

Repo tooling

Composer is used as a build tool, but no security scanning tools are detected. The missing scanning is a hygiene gap, though it is not by itself evidence of abandonment.