Package Health

pop-cms-schema/schema-commons-wp

This is a healthy, actively maintained release with a substantial history of 145 releases over more than three years, 33 releases in the last 12 months, a stable non-prerelease version, and a repository that was updated at release time. The package is correctly linked to its source, has a README, tests in both the artifact and repository, a license file, a modest dependency set, and no install-time lifecycle scripts. The main reservations are that all 14 recent commits came from one contributor, the repository has no security scanning or security policy, and its public popularity is low; however, organization ownership, frequent releases, and current activity materially reduce abandonment concerns.

Latest 19.2.4PackagistPackagist

84%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

80

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Maintainerscaution

Only one registry account has publish access, which is a modest operational concentration; this is partly compensated by the linked repository being owned by an organization and by strong release activity.

Repo bus factorcaution

One contributor made all 14 commits in the last three months, creating a genuine bus-factor concern; organization ownership provides some capacity for handoff but does not demonstrate a second active contributor.

Repo popularitycaution

The repository has only 2 stars, 0 forks, and 1 watcher, indicating limited external adoption; popularity is supporting evidence rather than a decisive health measure, especially given the package's active release history.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are detected, leaving a security-hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response procedures.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Leonardo Losoviz

Direct Dependencies

DependencyLast ReleaseScore
getpop/engine-wp
Version ^19.2.4
pop-cms-schema/schema-commons
Version ^19.2.4

Weekly Downloads

Info

Last Published
15 days ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform