pop-cms-schema/post-tag-mutations-wp

Maintainerscaution

Only one registry account has publish access, which is a resilience concern in isolation. The organization-owned repository and recent activity provide partial backing, so this is caution rather than danger.

Repo bus factorcaution

One contributor performed all 14 commits in the last 3 months, creating a genuine continuity risk. Organization ownership partly compensates because maintenance can potentially be handed off, but no second active contributor is evidenced.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. Although the package README claims the source is hosted in a GatoGraphQL monorepo, the collected repository evidence does not verify that relationship, so package/repository alignment should be checked before adoption.

Repo popularitycaution

The repository has zero stars and forks and one watcher, indicating limited public adoption. Popularity is supporting evidence only, so this modestly limits external validation but does not by itself make the package unsafe to depend on.

Repo toolingcaution

Composer is used as a build tool, but no security-scanning tool is detected. The missing scanning coverage is a transparency and defense-in-depth gap, though it is not evidence of maliciousness.