This release shows strong ongoing activity and reasonable package hygiene: it has 162 releases over roughly 5 years, 33 releases in the last 12 months, a stable version, a license file, tests, a matching repository, and recent commits. However, the package is explicitly marked abandoned on Packagist with a replacement package, and current repository activity is entirely concentrated in one contributor; these are substantial adoption and continuity risks. The package may still function, but a developer should generally migrate to the stated replacement rather than introduce a new dependency on this package.
42%
Total Score
70
100
78
90
Packagist marks the package as abandoned and identifies pop-schema/taxonomies as its replacement. This is a severe continuity concern even though the package has recent releases, so the net impact is danger.
Only one registry account has publishing access. The repository is organization-owned, which provides some backing context, but the narrow registry publisher base still creates operational concentration.
All 15 commits in the last 3 months came from one contributor, giving a 100% top-contributor share. Organization ownership provides some potential handoff capacity, but no second active contributor is shown, so concentration remains a caution.
No new issues or pull requests were recorded in the last month, and there were no merged pull requests; open issue count is unknown. This offers little evidence of community maintenance, though the missing issue count limits the conclusion.
The repository has 1 star, 0 forks, and 1 watcher. Low popularity is not decisive for a specialized package, but it provides little external evidence of broad adoption or review.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pop-cms-schema/customposts Version ^19.2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.