pop-cms-schema/media

This is a healthy, mature release with a five-year history, 162 releases, 33 releases in the last 12 months, a recent publication, stable versioning, clear licensing, tests, a coherent 38-file source tree, and no install-time lifecycle scripts. The main concern is maintenance concentration: all 15 commits in the last three months came from one contributor, and the repository has no security policy or security-scanning tooling. The organization-owned repository and strong release cadence provide meaningful support, so these are cautions rather than evidence that the package is unfit to depend on.

Latest 19.2.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access, which is a modest publishing-resilience concern; however, this package is backed by an organization-owned repository and the registry access list does not measure actual maintenance activity.

Repo bus factor

One contributor made all 15 commits in the last three months, creating a real continuity risk; organization ownership provides some ability to hand off maintenance but no second active contributor is shown.

Repo popularity

The repository has zero stars and forks and only one watcher, providing little independent adoption evidence; this is supporting evidence only and is outweighed by the package's sustained release activity.

Repo tooling

Composer is used as a build tool, but no security-scanning tools are reported, leaving a security-transparency gap despite the package's otherwise active maintenance.

Security policy

The linked repository has no security policy, which weakens vulnerability-reporting transparency; the README does provide an email route for security issues, partially compensating for the missing repository policy.