Package Health

pop-cms-schema/pages

This is a healthy, actively maintained release with a substantial history: 162 releases over roughly 5 years, 33 releases in the last 12 months, and the latest release published recently. It is stable, non-deprecated, licensed, has a matching and package-aware source repository, includes tests and a clear development README, and has no install-time lifecycle scripts. The main concerns are that all 16 recent commits came from one contributor, the repository has minimal popularity, and it lacks a repository security policy and security-scanning tooling. Organization ownership and the package's strong release cadence mitigate, but do not eliminate, the maintainer-concentration risk.

Latest 19.2.4PackagistPackagist

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

70

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Maintainerscaution

Only one registry publishing account is listed, which is a resilience concern, although the organization-backed repository and strong release activity provide compensating evidence.

Repo bus factorcaution

One contributor made all 16 commits in the last 3 months, creating a genuine continuity risk. Organization ownership provides some ability to hand off maintenance, but no second active contributor is evidenced.

Repo issue activitycaution

There were no new issues or pull requests in the last month and no merged pull requests; this shows limited visible collaboration, but does not contradict the recent commit and release activity.

Repo popularitycaution

The repository has only 1 star, 0 forks, and 1 watcher. This is weak supporting evidence, but popularity is not decisive for a specialized package and does not outweigh the strong release history.

Repo toolingcaution

Composer is used as a build tool, supporting reproducible package management, but no security-scanning tools are reported.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Leonardo Losoviz

Direct Dependencies

DependencyLast ReleaseScore
pop-cms-schema/customposts
Version ^19.2.4
—
—

Weekly Downloads

Info

Last Published
19 days ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform