This is a mature, actively released, stable package with a strong transparency and maintenance profile: it has existed since 2021, has 162 releases including 33 in the last 12 months, is not deprecated or archived, has a matching and package-aware repository, includes a license, tests, and Composer-managed dependencies, and was pushed very recently. The main concerns are that all 15 commits in the last 3 months came from one contributor, the repository has no security scanning or security policy, and repository popularity is minimal. However, the organization-backed repository, sustained release cadence, recent activity, and included tests substantially mitigate those concerns. It appears reasonable to depend on, with normal attention to maintainer concentration and security review.
82%
Total Score
90
100
89
90
All 15 recent commits came from one contributor, creating a genuine continuity and bus-factor concern; organization ownership provides some mitigation because maintenance can potentially be handed off.
The repository has only 1 star and no forks or watchers, indicating limited external adoption signals; popularity is supporting evidence rather than a health verdict, so this is a caution rather than a severe risk.
Composer build tooling is present, but no security scanning tools were detected. The build setup is healthy, while the missing security automation warrants a modest transparency and assurance concern.
The repository has no SECURITY.md or other detected security policy, leaving vulnerability-reporting and response expectations less explicit.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pop-cms-schema/taxonomies Version ^19.2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.