getpop/users-wp

This release shows strong evidence of active, mature development: it has 162 releases over roughly 5 years, 33 releases in the last 12 months, a stable non-prerelease version, recent repository activity, an organization-owned source repository, matching package references, a license, tests, and no install-time lifecycle scripts. However, Packagist explicitly marks the package as abandoned and identifies pop-schema/users-wp as its replacement; that is a decisive adoption concern even though maintenance is still active. The repository also has a single active contributor, no security policy, and no security-scanning tooling. Developers should prefer the stated replacement package rather than introduce a dependency on this abandoned package.

Latest 19.2.4

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Registry deprecation

Packagist marks the package as abandoned and provides pop-schema/users-wp as a replacement. This is a severe dependency-maintenance concern despite the package continuing to receive releases.

Maintainers

Only one registry account has publish access, which is a concentration concern, but the organization-owned repository and demonstrated release activity provide some backing.

Repo bus factor

One contributor made all 14 commits in the last 3 months, creating a genuine single-maintainer concentration risk. Organization ownership provides some potential handoff capacity but no second active contributor is shown.

Repo issue activity

There were no new or merged pull requests and no issue activity in the last month; the null open-issues count limits interpretation, so this is only a mild concern given the recent commit and release activity.

Repo popularity

The repository has only 1 star and no forks, indicating limited external adoption or review. This is supporting caution rather than a verdict because popularity is not required for a small stable package.