Package Health/pop-cms-schema/commentmeta-wp

pop-cms-schema/commentmeta-wp

This is a healthy, mature release with more than five years of history, 161 releases, 33 releases in the last 12 months, and a latest release published very recently. The package is stable, licensed, non-deprecated, has repository and artifact tests, and is backed by an active organization-owned repository with 16 commits in the last three months. The main concerns are that all recent commits come from one contributor, the repository has very low visible popularity, and it lacks a security policy and security-scanning tooling; these warrant review but do not outweigh the strong release and maintenance evidence.

Latest 19.2.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made all 16 commits in the last three months, creating a genuine continuity and bus-factor concern. The organization-owned repository provides some compensating maintenance context, so this is caution rather than danger.

Repo popularity

The repository has only 2 stars, 0 forks, and 1 watcher, indicating limited visible adoption or community participation. Popularity is supporting evidence rather than a verdict, and the strong release activity offsets much of this concern.

Repo tooling

Composer is used as a build tool, but no security-scanning tools are reported. The missing scanning coverage is a transparency and assurance gap, although it is not evidence of malicious behavior.

Security policy

No repository security policy was found. This weakens vulnerability-reporting transparency, though the README does provide a security contact instruction.