getpop/tags

This release has strong evidence of real, ongoing project activity: it has 162 releases over more than five years, 33 releases in the last 12 months, a stable non-prerelease version, current repository activity, tests, a matching repository, an explicit GPL license, and no install-time lifecycle scripts. However, the registry marks the package as abandoned and identifies pop-schema/tags/ as its replacement; that is a severe adoption risk and outweighs the otherwise healthy maintenance signals for this specific release. The repository also has a single active contributor, no security scanning, and no security policy, so developers should migrate to the replacement rather than take a new dependency on this package.

Latest 19.2.4Packagist

Health Score Breakdown

Registry deprecationdanger

Packagist marks the package as abandoned and provides pop-schema/tags/ as a replacement. This is a severe dependency-sustainability risk even though other signals show recent activity.

Repo bus factorcaution

One contributor made all 15 commits in the last 3 months, creating a low bus factor. Organization ownership provides some handoff capacity, but the observed maintenance base remains concentrated.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The build setup is positive, while the missing scanning is a modest hygiene gap.

Security policycaution

No repository security policy was found. This reduces vulnerability-reporting transparency, though it is secondary to the package's explicit abandonment status.

View all 15 health checks

Vulnerabilities

We didn't find any vulnerabilities for this package.

Maintainers

Leonardo Losoviz

Direct Dependencies

Dependency	Last Release	Score
pop-cms-schema/taxonomies Version ^19.2.4	—	—