Package Health

pop-cms-schema/comment-mutations-wp

This is a healthy, actively maintained release with a long history, 161 releases since 2021, 32 releases in the last 12 months, stable versioning, current repository activity, clear licensing, and package/repository alignment. The main concerns are that all 15 commits in the last three months came from one contributor, the repository has no security scanning or security policy, and neither the artifact nor repository includes a changelog; however, the repository is organization-owned, not archived, and the package has strong release continuity and basic build/test scaffolding. It appears reasonable to depend on, with normal monitoring of maintainer continuity and security practices.

Latest 19.2.4PackagistPackagist

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

70

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Maintainerscaution

Only one registry account has publish access, which is a concentration concern, but the repository is organization-owned and actual commit activity provides stronger maintenance evidence.

Package scaffoldingcaution

A substantial README and tests are present, and the README documents installation, development, testing, security reporting, and licensing. The missing changelog in both artifact and repository is a modest transparency gap.

Repo bus factorcaution

One contributor made all 15 commits in the last three months, creating a real continuity risk. Organization ownership provides some handoff potential, but no second active contributor is shown to compensate for the concentration.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month and no merged pull requests. This limits evidence of community activity, though it is partly offset by 15 recent commits and frequent releases.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. This weakens external adoption evidence, but popularity is supporting evidence and does not outweigh the package's strong release and maintenance history.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Leonardo Losoviz

Direct Dependencies

DependencyLast ReleaseScore
pop-cms-schema/comments
Version ^19.2.4
—
—
pop-cms-schema/comments-wp
Version ^19.2.4
—
—
pop-cms-schema/customposts-wp
Version ^19.2.4
—
—
pop-cms-schema/comment-mutations
Version ^19.2.4
—
—
pop-cms-schema/user-state-mutations-wp
Version ^19.2.4
—
—

Weekly Downloads

Info

Last Published
19 days ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform