Package Health/pop-cms-schema/custompostmedia

pop-cms-schema/custompostmedia

This is a healthy, mature release with more than five years of history, 162 releases, 33 releases in the last 12 months, and a current stable version. The repository is active, unarchived, correctly associated with the package, backed by an organization, and the package includes a README, tests, licensing, and no install-time lifecycle scripts. The main concerns are that recent activity is concentrated entirely in one contributor, the repository has very little public popularity, no security policy or security-scanning tooling, and no changelog; these reduce resilience and transparency but do not outweigh the strong release and maintenance record.

Latest 19.2.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access, which is a potential publishing continuity concern. This is partly compensated by the repository being owned by the PoPCMSSchema organization, so it is not treated as a severe risk.

Repo bus factor

All 15 recent commits came from one contributor, creating a concentrated maintenance risk. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo issue activity

There were no new or closed issues and no pull-request activity in the last month; the absence of activity is ambiguous because open issue count is unavailable, so it is only a mild concern.

Repo popularity

The repository has only 1 star, 0 forks, and 1 watcher, so external adoption and review appear limited. Popularity is supporting evidence rather than a decisive health criterion, but this modestly reduces confidence in community resilience.

Repo tooling

Composer is used as a build tool, but no security-scanning tools are configured. The missing scanning is a hygiene gap, not evidence of abandonment or maliciousness.