Package Health/pop-cms-schema/schema-commons

pop-cms-schema/schema-commons

This is a generally healthy and actively maintained release: it has 145 releases over roughly 3.7 years, 33 releases in the last 12 months, a stable non-prerelease version, a non-archived repository with a very recent push, and a clear organization-backed repository match. The main concerns are concentrated recent contribution activity from one contributor, no repository security policy or security-scanning tooling, and no changelog despite the README referring to one. These are meaningful transparency and continuity gaps, but they do not outweigh the strong release cadence, current maintenance, licensing, tests, and project backing.

Latest 19.2.4

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access, which is a continuity concern in isolation; the organization-owned repository provides some compensating project backing, but does not eliminate release-access concentration.

Package scaffolding

The artifact includes a README and tests, and the repository also reports tests; the missing changelog is a modest transparency gap because the README directs users to a changelog that is not present.

Repo bus factor

All 15 commits in the last three months came from one contributor, creating a genuine continuity risk. Organization ownership provides some handoff capacity, but no second active contributor is shown by this signal.

Repo popularity

The repository has only 2 stars, 0 forks, and 1 watcher. This is weak supporting evidence, but popularity is not decisive for a small stable component.

Repo tooling

Composer build tooling is present, but no security-scanning tools are reported; the missing security automation is a modest supply-chain hygiene gap.