Package Health/graphql-by-pop/graphql-clients-for-wp

graphql-by-pop/graphql-clients-for-wp

This is a healthy, actively maintained release with a five-year history, 162 releases, 33 releases in the last 12 months, and a current stable version. The linked repository is active, non-archived, correctly associated with the package, and backed by an organization, while the artifact includes a README, tests, and a clear GPL license. Adoption signals are modest and maintenance is concentrated entirely in one recent contributor; the repository also lacks security scanning and a formal security policy, and its 19 open pull requests show no recent merges, so dependency risk is not negligible despite strong release continuity.

Latest 19.2.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Repo bus factor

One contributor made all 17 commits in the last 3 months, giving the repository a top-contributor share of 100%. Organization ownership partly mitigates handoff risk, but the observed contributor concentration remains a genuine maintenance concern.

Repo issue activity

There are 19 open pull requests, but no new or merged pull requests in the last month and no new or closed issues. This suggests some unresolved collaboration backlog and warrants caution, although release activity remains strong.

Repo popularity

The repository has only 2 stars, 1 fork, and 1 watcher. Low popularity is supporting evidence rather than a verdict, but it provides little external resilience or adoption signal.

Repo tooling

Composer is used as a build tool, but no security scanning tools are detected. Build tooling supports reproducibility, while the missing security automation is a modest hygiene gap.