This is a healthy, actively maintained release with a substantial history: 162 releases over roughly 5 years, 33 releases in the last 12 months, and the latest release published recently. It is stable, non-deprecated, licensed, has a matching and package-aware source repository, includes tests and a clear development README, and has no install-time lifecycle scripts. The main concerns are that all 16 recent commits came from one contributor, the repository has minimal popularity, and it lacks a repository security policy and security-scanning tooling. Organization ownership and the package's strong release cadence mitigate, but do not eliminate, the maintainer-concentration risk.
82%
Total Score
70
100
89
90
Only one registry publishing account is listed, which is a resilience concern, although the organization-backed repository and strong release activity provide compensating evidence.
One contributor made all 16 commits in the last 3 months, creating a genuine continuity risk. Organization ownership provides some ability to hand off maintenance, but no second active contributor is evidenced.
There were no new issues or pull requests in the last month and no merged pull requests; this shows limited visible collaboration, but does not contradict the recent commit and release activity.
The repository has only 1 star, 0 forks, and 1 watcher. This is weak supporting evidence, but popularity is not decisive for a specialized package and does not outweigh the strong release history.
Composer is used as a build tool, supporting reproducible package management, but no security-scanning tools are reported.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pop-cms-schema/customposts Version ^19.2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.