Package Health

pop-cms-schema/custompost-mutations-wp

This is a healthy, actively maintained Composer package with a substantial release history: 161 releases over roughly 5 years, 33 releases in the last 12 months, and a current stable release. The linked repository is active, unarchived, correctly associated with the package, and backed by an organization; the package also includes a license, README, tests, and no install-time lifecycle scripts. The main concerns are that all recent repository commits come from one contributor, the repository has no configured security scanning or security policy, popularity is minimal, and no changelog is present. These are meaningful resilience and transparency gaps, but they do not outweigh the strong release and maintenance evidence.

Latest 19.2.4PackagistPackagist

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

80

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Maintainerscaution

Only one registry account has publish access, which is a resilience concern, although the repository is organization-owned and recent release activity is strong.

Repo bus factorcaution

One contributor made all 15 commits in the last three months, creating a clear single-maintainer continuity risk. Organization backing partially compensates because maintenance can potentially be handed off, but no second active contributor is evidenced.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these values provide little external validation.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured; this leaves a security-hygiene gap without evidence of an active vulnerability.

Security policycaution

The repository has no SECURITY.md or equivalent security policy, reducing transparency about vulnerability reporting and response procedures.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Leonardo Losoviz

Direct Dependencies

DependencyLast ReleaseScore
pop-cms-schema/user-roles-wp
Version ^19.2.4
pop-cms-schema/customposts-wp
Version ^19.2.4
pop-cms-schema/custompost-mutations
Version ^19.2.4
pop-cms-schema/user-state-mutations-wp
Version ^19.2.4

Weekly Downloads

Info

Last Published
16 days ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform