Package Health

pop-cms-schema/custompost-tags-wp

This is a healthy, actively maintained release with a strong release history: 154 releases over roughly 5 years, 33 in the last 12 months, and a latest release on the assessment date. It is stable, not deprecated, clearly licensed, linked to a matching organization-owned repository, and has recent commit activity, tests, and a clean package tree. The main concerns are maintenance concentration in one contributor, the absence of a repository security policy, and limited repository popularity; these warrant some dependency risk awareness but do not outweigh the sustained release and commit activity. The package is reasonable to depend on, with contingency planning for single-maintainer continuity.

Latest 19.2.4PackagistPackagist

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

90

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Repo bus factorcaution

One contributor made all 14 commits in the last 3 months, producing a 100% top-contributor share. The organization-owned repository partly compensates for this concentration, but individual continuity remains a real concern.

Repo popularitycaution

The repository has only 2 stars, 0 forks, and 1 watcher. This limits popularity-based supporting evidence, but popularity is not decisive and the package has strong release and commit activity.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are reported. The lack of scanning is a hygiene gap, not a severe risk by itself.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Leonardo Losoviz

Direct Dependencies

DependencyLast ReleaseScore
pop-cms-schema/tags-wp
Version ^19.2.4
—
—
pop-cms-schema/customposts-wp
Version ^19.2.4
—
—

Weekly Downloads

Info

Last Published
19 days ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform