Package Health/pop-cms-schema/queriedobject

pop-cms-schema/queriedobject

This is a healthy, mature release with a strong maintenance record: the package is over five years old, has 162 releases including 33 in the last 12 months, and the current version is stable and not deprecated. The linked repository is active, non-archived, correctly associated with the package, and backed by an organization, while the artifact includes a README, tests, a license, and no install-time lifecycle scripts. The main concerns are that all recent repository commits come from one contributor, the repository has no security policy or security-scanning tooling, and there is no changelog; these reduce resilience and transparency but do not outweigh the sustained release activity, project backing, and current maintenance.

Latest 19.2.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access, which is a mild operational concentration concern; the organization-backed repository and active release history provide some compensation.

Repo bus factor

One contributor made all 15 commits in the last three months, creating a genuine bus-factor and succession risk; organization backing partially compensates because maintenance can potentially be transferred within the project.

Repo issue activity

There were no new or closed issues or pull requests in the last month, and open issue count is unknown; this offers little evidence of community activity, although it does not contradict the recent commit and release activity.

Repo popularity

The repository has zero stars and forks and one watcher. Popularity is supporting evidence rather than a verdict, so this is a weak caution rather than a severe health concern.

Repo tooling

Composer is used as a build tool, but no security-scanning tools are reported. The missing scanning layer is a hygiene gap, not evidence that the package is unsafe.