Package Health/pop-cms-schema/custompostmeta

pop-cms-schema/custompostmeta

This is a mature, actively released package with 162 releases since January 2021, 33 releases in the last 12 months, a stable non-prerelease version, a valid GPL license, repository-backed tests, and recent repository activity. The main concerns are that all 15 commits in the last 3 months came from one contributor, the repository has no security scanning or security policy, and its very small popularity footprint provides little independent adoption evidence; however, the repository is not archived, the package is not deprecated, it has recent release activity, and the organization-backed repository reduces the maintainer concentration risk. Overall, it appears reasonable to depend on, with normal due diligence around maintainer continuity and security practices.

Latest 19.2.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made 100% of the 15 commits in the last 3 months, creating a genuine continuity risk. The organization-owned repository partly compensates because maintenance can potentially be handed off, but the current activity remains concentrated.

Repo popularity

The repository has only 2 stars, 0 forks, and 1 watcher, providing little supporting evidence of broad adoption. Popularity is not decisive, but this small footprint modestly lowers confidence in community resilience.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured. The build setup is appropriate; the absent security automation is a modest hygiene gap rather than a severe health failure.

Security policy

The repository has no SECURITY.md or other detected security policy, leaving vulnerability-reporting expectations less transparent for dependents.