Package Health

pop-cms-schema/custompost-tag-mutations

This is a healthy, actively maintained Composer package with a long history, 154 releases, 33 releases in the last 12 months, recent publication, stable versions, a non-deprecated registry status, an identifiable and matching source repository, tests, licensing, and no install-time lifecycle scripts. The main concerns are that all 15 commits in the last 3 months came from one contributor, the repository has no security scanning or security policy, and the project has little visible external popularity or issue activity; however, the organization-owned repository and strong release cadence materially reduce abandonment risk. It appears reasonable to depend on, with normal supply-chain and maintainer-continuity precautions.

Latest 19.2.4PackagistPackagist

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

80

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Repo bus factorcaution

One contributor made all 15 recent commits, creating a genuine maintainer-continuity risk; the organization-owned repository partially compensates because maintenance can potentially be handed off within the project.

Repo issue activitycaution

There are no open issues or pull requests and no issue or PR activity in the last month. This provides little evidence of community engagement, though it is not inherently negative for a small stable package.

Repo popularitycaution

The repository has zero stars and forks and one watcher, indicating limited external visibility; this is supporting caution rather than a decisive health problem for a small component package.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are detected. The build tooling is appropriate, while the absent scanning is a modest transparency and assurance gap.

Security policycaution

The repository has no SECURITY.md or other detected security policy, leaving vulnerability-reporting and response expectations less transparent.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Leonardo Losoviz

Direct Dependencies

DependencyLast ReleaseScore
pop-cms-schema/tags
Version ^19.2.4
—
—
pop-cms-schema/taxonomy-mutations
Version ^19.2.4
—
—
pop-cms-schema/custompost-mutations
Version ^19.2.4
—
—

Weekly Downloads

Info

Last Published
19 days ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform