Package Health

pop-cms-schema/custompost-categories-wp

This is a healthy, actively maintained release with a substantial history: 154 releases over more than five years, 33 releases in the last 12 months, and a stable non-prerelease version. The repository is active, unarchived, correctly associated with the package, backed by an organization, and the package is licensed and transparently structured with a README, tests, and Composer build tooling. The main concerns are concentrated maintenance: all 14 recent commits came from one contributor, the repository has very little public popularity, and it has no security scanning or security policy. These issues warrant some supply-chain and continuity caution, but the strong release cadence and recent repository activity make the package reasonable to depend on.

Latest 19.2.4PackagistPackagist

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

83

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Repo bus factorcaution

One contributor made 100% of the 14 commits in the last 3 months. Organization backing provides some handoff potential, but the observed contributor concentration still creates continuity risk.

Repo popularitycaution

The repository has only 2 stars, 0 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these low engagement levels provide little external validation or resilience signal.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are reported. The build setup is adequate while the missing security automation is a hygiene gap.

Security policycaution

The repository has no security policy. For a dependency, this weakens vulnerability-reporting transparency and modestly increases maintenance and disclosure uncertainty.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Leonardo Losoviz

Direct Dependencies

DependencyLast ReleaseScore
pop-cms-schema/categories-wp
Version ^19.2.4
—
—
pop-cms-schema/customposts-wp
Version ^19.2.4
—
—

Weekly Downloads

Info

Last Published
18 days ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform