This release shows strong ongoing maintenance signals: it has 162 releases over roughly 5.6 years, 33 releases in the last 12 months, a stable version, recent repository activity, tests, a matching and referencing source repository, and organization backing. However, the package is explicitly marked abandoned on Packagist with a replacement package, which is a severe dependency-sustainability risk and makes this release unsuitable for a new dependency despite its recent activity. Maintenance is also concentrated in one contributor, and the repository lacks a security policy, so adoption should favor the stated replacement and include a migration plan.
35%
Total Score
80
100
78
90
Packagist marks the package as abandoned and names pop-schema/taxonomies-wp as its replacement. This is a severe sustainability concern that outweighs the otherwise healthy release activity.
One contributor made all 15 commits in the last 3 months, giving the repository a bus factor of one. Organization backing provides some handoff capacity, but no second active contributor is shown.
There were no new or closed issues or pull requests in the last month, while open issue count is unknown. This offers limited evidence about issue responsiveness.
The repository has one star, zero forks, and one watcher. Low popularity is not decisive for a small component, but it provides little independent evidence of broad adoption.
Composer build tooling is present, but no security scanning tools are reported. Build support is adequate, while security-process coverage is limited.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pop-cms-schema/taxonomies Version ^19.2.4 | — | — |
pop-cms-schema/customposts-wp Version ^19.2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.