This is a generally healthy and actively maintained release: it has a five-year history, 162 releases, 33 releases in the last 12 months, a stable non-prerelease version, recent repository activity, an unarchived source repository, and clear licensing and package structure. The main risks are concentrated maintenance, with all 14 recent commits from one contributor, limited repository popularity, no security scanning or security policy, and no changelog; however, the repository is organization-owned and the package is explicitly represented in its matching repository, which provides meaningful backing and transparency. It is reasonable to depend on, with some maintainer-continuity and security-process risk.
78%
Total Score
70
100
89
90
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pop-cms-schema/comments Version ^19.2.4 | — | — |
pop-cms-schema/customposts-wp Version ^19.2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.