Package Health/pop-cms-schema/pagemedia-mutations

pop-cms-schema/pagemedia-mutations

This is a healthy, actively maintained release with a substantial history of 145 releases over roughly 3 years and 33 releases in the last 12 months, including a current stable non-prerelease version. The package is licensed, has a README and tests, uses a normal Composer build setup without install-time scripts, and is backed by a matching organization-owned repository that was updated very recently. The main concerns are that all 15 recent commits came from one contributor, the repository has no security policy or security scanning tooling, and the project has minimal public popularity; these are meaningful transparency and continuity limitations but do not outweigh the strong release and maintenance evidence.

Latest 19.2.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access, which limits publishing redundancy. However, registry access reflects administrative permissions rather than actual maintenance activity, and the repository shows ongoing commits.

Repo bus factor

One contributor made 100% of the 15 commits in the last 3 months, creating a genuine continuity risk. Organization ownership provides some capacity for handoff, but no second active contributor is shown to compensate for the concentration.

Repo popularity

The repository has only 1 star, 0 forks, and 1 watcher, indicating limited external adoption or visibility. Popularity is supporting evidence rather than a verdict, so this is a modest concern rather than a severe risk.

Repo tooling

Composer is used as a build tool, but no security scanning tool is present. The build setup is appropriate, while the missing security automation is a minor hygiene gap.

Security policy

The repository has no SECURITY.md or other detected security policy, leaving vulnerability-reporting and response expectations undocumented.