This is a healthy, actively maintained release with a substantial history of 145 releases over more than three years, 33 releases in the last 12 months, a stable non-prerelease version, and a repository that was updated at release time. The package is correctly linked to its source, has a README, tests in both the artifact and repository, a license file, a modest dependency set, and no install-time lifecycle scripts. The main reservations are that all 14 recent commits came from one contributor, the repository has no security scanning or security policy, and its public popularity is low; however, organization ownership, frequent releases, and current activity materially reduce abandonment concerns.
84%
Total Score
80
100
89
90
Only one registry account has publish access, which is a modest operational concentration; this is partly compensated by the linked repository being owned by an organization and by strong release activity.
One contributor made all 14 commits in the last three months, creating a genuine bus-factor concern; organization ownership provides some capacity for handoff but does not demonstrate a second active contributor.
The repository has only 2 stars, 0 forks, and 1 watcher, indicating limited external adoption; popularity is supporting evidence rather than a decisive health measure, especially given the package's active release history.
Composer is used as a build tool, but no security scanning tools are detected, leaving a security-hygiene gap.
The repository has no security policy, reducing transparency about vulnerability reporting and response procedures.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
getpop/engine-wp Version ^19.2.4 | — | — |
pop-cms-schema/schema-commons Version ^19.2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.