pop-cms-schema/custompostmedia-mutations
This is a mature, actively maintained Composer package with 162 releases over roughly 5 years, 33 releases in the last 12 months, a stable non-prerelease version, a current non-archived repository, documented tests, and clear licensing. The main concerns are that all 16 commits in the last 3 months came from one contributor, the repository has very limited popularity, and it lacks a repository security policy and automated security-scanning tools; these warrant monitoring but do not outweigh the strong release and repository activity. It appears reasonable to depend on, with normal contingency planning for maintainer concentration.
78%
Total Score
90
100
89
90
Health Score Breakdown
One contributor made all 16 commits in the last 3 months, creating a genuine maintainer concentration risk. Organization ownership provides some potential for handoff, but no second active contributor is shown in this signal.
The repository has only 1 star, 0 forks, and 1 watcher, indicating limited external adoption or visibility. Popularity is supporting evidence rather than a verdict, so this modestly lowers confidence and health but is not independently disqualifying.
Composer is used as the build tool, but no security-scanning tools are detected. The missing scanning is a hygiene gap, though it is not evidence of maliciousness and does not outweigh the package's active maintenance indicators.
The repository has no SECURITY.md or other detected security policy. The package README does provide a security contact, which partially compensates for the repository-level gap, but formal disclosure guidance remains limited.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Leonardo Losoviz |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 pop-cms-schema/custompostmedia Version ^19.2.4 | — | — |
pop-cms-schema/media-mutations Version ^19.2.4 | — | — |
pop-cms-schema/custompost-mutations Version ^19.2.4 | — | — |
Weekly Downloads
Info
- Last Published
- 19 days ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.