pop-cms-schema/posts

This is a healthy, actively maintained release with a five-year history, 162 releases, 33 releases in the last 12 months, a stable version, recent repository activity, clear licensing, tests, and no install-time lifecycle scripts. The main concerns are that all 15 commits in the last three months came from one contributor, the repository has no security scanning or security policy, and no changelog was detected; however, the repository is organization-owned, unarchived, matches the package, and the package and repository contain substantial source and test scaffolding. It appears reasonable to depend on, with normal resilience and security-process caveats.

Latest 19.2.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made 100% of the 15 recent commits, creating a meaningful continuity and bus-factor concern. Organization ownership provides some potential handoff capacity, but no second active contributor is evidenced here.

Repo popularity

The repository has only 2 stars, 0 forks, and 1 watcher, indicating limited external adoption. This is supporting evidence only and does not outweigh the package's strong release and maintenance record.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This weakens automated security-process transparency without indicating abandonment.

Security policy

No repository security policy was detected, leaving vulnerability-reporting and response expectations less explicit; the README does provide an email-based security reporting instruction, which partly compensates.