This release appears healthy and suitable to depend on: it has a long release history with 145 releases, 33 releases in the last 12 months, a stable non-prerelease version, and a release published very recently. The repository is active, unarchived, correctly associated with the package, and backed by an organization, while the artifact includes a license, README, tests, and a substantial source tree. The main risks are concentrated maintenance, since one contributor made all 16 commits in the last three months, plus the absence of repository security scanning and a security policy; low popularity is only weak supporting evidence and not itself a material dependency concern.
86%
Total Score
80
100
89
90
One contributor made all 16 commits in the last three months, creating a meaningful continuity and bus-factor concern. Organization ownership partially compensates because maintenance can potentially be handed off within the project.
There are no open issues or pull requests, and no issue or pull-request activity in the last month. This does not indicate a problem by itself, but it provides little evidence about community support or responsiveness.
The repository has only 1 star and no forks, so external adoption evidence is limited. This is weak supporting evidence rather than a health verdict, especially given the package's demonstrated release activity.
Composer build tooling is present, but no security-scanning tools are configured. The missing scanning is a transparency and defense-in-depth gap, though it is not evidence that the package is unsafe.
The repository has no security policy, leaving vulnerability-reporting and security-response procedures undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pop-cms-schema/pages Version ^19.2.4 | — | — |
pop-cms-schema/custompost-mutations Version ^19.2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.