pop-api/api-mirrorquery

This is a mature, actively released, stable package with 162 releases over roughly 5 years, 33 releases in the last 12 months, a current non-prerelease version, an unarchived repository, a matching and package-referencing source repository, tests, clear licensing, and no install-time lifecycle scripts. The main risks are concentrated maintenance, with all 14 recent commits from one contributor, limited repository popularity, and no repository security policy or security-scanning tooling. The organization-owned repository provides some continuity, but the package remains a reasonable dependency with a modest maintainer-bus-factor concern.

Latest 19.2.4

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry publisher is listed, which is a mild publishing-continuity concern, though the linked repository is organization-owned and active.

Repo bus factor

All 14 recent commits came from one contributor with a 100% share, creating a genuine continuity risk. Organization ownership provides some potential handoff capacity, but no second active contributor is shown.

Repo issue activity

There were no new or merged pull requests and no issue activity in the last month; this is limited evidence because open issue count is unknown, so it is only a mild concern alongside active releases.

Repo popularity

The repository has only 2 stars, 0 forks, and 1 watcher. This is weak supporting evidence, but popularity alone does not outweigh the strong release and commit activity.

Repo tooling

Composer build tooling is present, but no security-scanning tools are configured; this is a hygiene gap rather than evidence of unsafe behavior.