Package Health/municipio/content-insights-for-editors

municipio/content-insights-for-editors

Usable with caveats: the package is clearly licensed, documented, backed by an organization, and its repository is active rather than archived. The release on the registry is more than three years old, while recent repository activity comes from only one contributor and there is no security policy.

Latest 2.1.0

Packagist

64%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest registry release was published more than three years ago, with no releases in the last 12 months. That raises concerns about whether the published dependency is keeping pace, although the repository has had recent activity.

Repo bus factor

All recent commit activity comes from one contributor, creating a narrow maintenance base. Organization backing provides some ability to hand work off, but no second active contributor is shown.

Repo commit activity

The repository recorded one commit in the last three months, so it is not completely dormant. However, the activity is very limited and does not offset the long gap since the latest registry release.

Repo tooling

Composer is used as a build tool, which supports reproducible packaging. No security scanning tools are present, so this offers build structure but limited security-process evidence.

Security policy

The repository has no SECURITY.md or other recorded security policy. For a WordPress plugin that processes site content and sends notifications, this is a meaningful transparency and maintenance gap.