Package Health/pop-cms-schema/queriedobject-wp

pop-cms-schema/queriedobject-wp

This is a healthy, actively maintained release with a substantial history: 161 releases over roughly 5 years, 33 releases in the last 12 months, a stable non-prerelease version, and a source repository that is current and not archived. The package is licensed, documented, tested in the repository, has a small runtime dependency footprint, and has no install-time lifecycle scripts or dangerous workflows. The main concerns are that recent repository work is concentrated entirely in one contributor, the repository has no security policy or security-scanning tooling, and the repository has negligible public popularity; organization ownership and the strong release cadence partially offset these concerns. It appears reasonable to depend on, subject to normal review of its concentrated maintainer base.

Latest 19.2.4

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access, which is a mild operational concentration risk; the organization-owned source repository and strong release activity provide some compensating project backing.

Repo bus factor

All 14 recent commits came from one contributor, creating a genuine continuity risk. Organization ownership provides some handoff potential, but no second active contributor is shown to offset the concentration.

Repo issue activity

There were no new or merged pull requests in the last month and no issue activity was recorded; this is a limited transparency signal, but it does not outweigh the recent commit and release cadence.

Repo popularity

The repository has 0 stars and 0 forks with 1 watcher, so there is little external adoption evidence; popularity is supporting evidence only and is outweighed here by active releases and recent commits.

Repo tooling

Composer is used as a build tool, but no security-scanning tooling is detected; the build tooling is appropriate while the security-automation gap warrants caution.