Package Health/pop-api/api-endpoints-for-wp

pop-api/api-endpoints-for-wp

This is a healthy, actively maintained Composer package with a release history dating to 2021, 163 releases, 33 releases in the last 12 months, and a current stable version. The artifact is licensed, includes a README and tests, has no install-time lifecycle scripts, is not deprecated or archived, and is backed by an organization-owned repository that clearly matches the package. The main risks are concentrated maintenance: one contributor made all 14 commits in the last three months, the repository has very little public popularity, and it lacks a security policy and security-scanning tooling. These concerns warrant monitoring but do not outweigh the strong release cadence, current repository activity, and package hygiene.

Latest 19.2.4

Packagist

84%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access, which is a modest publishing-resilience concern; however, the linked repository is organization-owned, providing some backing beyond the registry account.

Repo bus factor

One contributor made all 14 commits in the last 3 months, creating a genuine continuity risk; organization ownership provides some potential handoff capacity but does not remove the observed concentration.

Repo popularity

The repository has only 2 stars, 0 forks, and 1 watcher. This limits popularity-based supporting evidence but is not itself evidence that a small package is unsafe to depend on.

Repo tooling

Composer build tooling is present, but no security-scanning tools are configured. The missing scanning is a security-process gap, though it is not by itself evidence of poor maintenance.

Security policy

No repository security policy was found, leaving vulnerability-reporting guidance less transparent than ideal.