Package Health/pop-cms-schema/postmedia-mutations

pop-cms-schema/postmedia-mutations

This is a healthy, actively maintained release with a strong release history, stable versioning, current repository activity, explicit licensing, tests, and no deprecation or install-time lifecycle scripts. The main concerns are maintenance concentration in one contributor, the absence of a repository security policy and security-scanning tooling, and limited repository popularity; however, the organization-owned repository, package/repository alignment, and frequent recent releases provide meaningful backing and transparency. It is reasonable to depend on, with some operational risk from the narrow active contributor base.

Latest 19.2.4

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publishing access. This is a modest supply-chain and continuity concern, though it is partly compensated by the organization-owned source repository and strong observed release activity.

Repo bus factor

All 15 recent commits came from a single contributor, giving the project a high continuity risk. Organization ownership provides some ability to hand maintenance off, but no second active contributor is shown.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning coverage is a genuine security-hygiene gap, though it does not by itself indicate an unsafe package.

Security policy

No repository security policy was detected. The README does provide a security contact, which partially compensates for the missing formal policy, but the repository still has a transparency and incident-reporting hygiene gap.