pop-cms-schema/meta

This is a healthy, actively maintained release with a five-year history, 162 releases, 33 releases in the last 12 months, and a latest release published immediately before assessment. It is stable, licensed, non-deprecated, has tests and a focused dependency profile, and the linked organization-owned repository is active and clearly matches the package. The main concerns are that all 17 recent commits came from one contributor, the repository has no security scanning or security policy, and repository popularity is very low; these increase continuity and transparency risk but do not outweigh the strong release and maintenance evidence.

Latest 19.2.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

All 17 recent commits came from one contributor, creating a genuine continuity risk. Organization ownership provides some ability to hand off maintenance, but no second active contributor is shown in this period.

Repo popularity

The repository has only 2 stars, 0 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these very low numbers provide little external validation and modestly increase continuity risk.

Repo tooling

Composer build tooling is present, but no security-scanning tools are reported. This is a transparency and assurance gap, though it is not evidence that the package is unsafe by itself.

Security policy

The repository has no security policy. That weakens vulnerability-reporting transparency and response expectations, so it is a modest maintenance and security-process concern.