pop-cms-schema/pages-wp

This is a mature, actively maintained Composer package with 162 releases since January 2021, 33 releases in the last 12 months, stable versioning, a non-deprecated registry entry, a matching source repository, and 14 commits in the last three months. Licensing, README guidance, tests, and a minimal runtime dependency set further support adoption. The main concerns are that all recent commits come from one contributor, the repository has very limited popularity, and no security policy or security-scanning tooling was detected; these are meaningful transparency and continuity gaps, but the organization-owned project backing and strong release activity reduce the abandonment risk. No install-time lifecycle scripts or dangerous workflows were found.

Latest 19.2.4

Packagist

80%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access, which is a continuity concern in isolation. The repository is owned by an organization and the package has substantial recent release activity, partly compensating for the narrow registry publishing base.

Repo bus factor

One contributor made all 14 commits in the last three months, creating a meaningful continuity risk. Organization ownership provides some ability to hand off maintenance, but no second active contributor is evidenced here.

Repo issue activity

There were no new issues or pull requests in the last month, and no pull requests were open. This provides little evidence of external review or collaboration, though it does not establish abandonment given the recent commit and release activity.

Repo popularity

The repository has only 1 star, 1 fork, and 1 watcher, indicating limited external adoption or visibility. Popularity is supporting evidence rather than a decisive health measure, so this is a caution rather than a severe risk.

Repo tooling

Composer is used as a build tool, but no security-scanning tooling was detected. The missing scanner lowers supply-chain transparency, although it is not evidence of maliciousness or abandonment by itself.