Package Health/pop-cms-schema/metaquery-wp

pop-cms-schema/metaquery-wp

This is a healthy, actively maintained release with a long history, frequent recent releases, stable versioning, a clear license, tests, low runtime dependency count, and a repository that is neither archived nor mismatched to the package. The main concerns are that all recent commits come from one contributor, the repository has no security policy or security-scanning tooling, and the package has limited public popularity and no changelog; these are meaningful transparency and continuity gaps, but they are outweighed by the strong release cadence, recent repository activity, organization backing, and consistent package structure.

Latest 19.2.4

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access, which is a continuity concern in isolation. However, the source project is organization-owned and the package shows sustained release activity, so this is a moderate rather than severe risk.

Package scaffolding

The artifact includes a substantial README and tests, and the README documents installation, usage, testing, contribution, and security reporting. The missing changelog is a modest transparency gap, although the README points consumers to a changelog location.

Repo bus factor

All 14 commits in the last three months came from one contributor, creating a genuine continuity risk. Organization ownership provides some handoff capacity, but no second active contributor is shown by this signal.

Repo popularity

The repository has zero stars and forks and one watcher, indicating limited public adoption or visibility. Popularity is supporting evidence only, so this lowers confidence in community depth but does not outweigh the observed maintenance record.

Repo tooling

Composer is used as a build tool, but no security-scanning tools are reported. The build setup is appropriate, while the absent scanning coverage is a modest security-hygiene gap.