Package Health

pop-cms-schema/commentmeta

This is a mature and actively maintained release with a five-year history, 162 releases, 33 releases in the last 12 months, a recent publication, stable versioning, an unarchived repository, clear licensing, tests in the artifact and repository, and no install-time lifecycle scripts. The main concerns are that all 15 recent commits came from one contributor, the repository has minimal popularity, and no security scanning or security policy was observed; these reduce resilience and transparency but do not outweigh the strong release and maintenance evidence, particularly given the organization-owned repository.

Latest 19.2.4PackagistPackagist

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

70

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health Score Breakdown

Package file treecaution

The 15-file tree is coherent for a focused Composer library, containing source code, configuration, documentation, licensing, and tests. The single disabled test file limits evidence of effective test coverage, but the repository-level test presence is still positive.

Repo bus factorcaution

One contributor made 100% of the 15 recent commits, creating a clear single-maintainer continuity risk. The organization-owned repository provides some potential handoff capacity, which makes this a caution rather than a danger.

Repo commit activitycaution

The repository recorded 15 commits in the last 3 months, all from one active maintainer, demonstrating current maintenance but limited contributor breadth.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, and no pull requests were open. This provides little evidence of an active external review community, though the absence of issue activity is less concerning for a small focused component with recent commits.

Repo popularitycaution

The repository has only 1 star, 0 forks, and 1 watcher, indicating limited external adoption or review. Popularity is supporting evidence rather than a verdict, so this is a modest caution rather than a severe risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Leonardo Losoviz

Direct Dependencies

DependencyLast ReleaseScore
pop-cms-schema/meta
Version ^19.2.4
pop-cms-schema/comments
Version ^19.2.4

Weekly Downloads

Info

Last Published
15 days ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform