pop-cms-schema/tags

This is a healthy, mature release with a five-year history, 162 releases, 33 releases in the last 12 months, and a latest release published very recently. The package is stable, not deprecated, clearly licensed, linked to a matching organization-owned repository, and includes source files, tests, documentation, and Composer build metadata without install-time scripts. The main concerns are that all 15 recent commits came from one contributor, repository popularity is very low, there has been no recent issue or pull-request activity, and the repository has no declared security policy or security-scanning tooling. These are meaningful transparency and continuity gaps, but they are outweighed by the strong release cadence, active repository, organization backing, and coherent package/repository structure.

Latest 19.2.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Repo bus factor

One contributor made all 15 commits in the last three months, creating a genuine continuity risk; organization ownership provides some ability to hand off maintenance but no second active contributor is evidenced.

Repo issue activity

There were no new or closed issues or pull requests in the last month, and no pull requests are open; this limits evidence of community review, though it does not contradict the active release cadence.

Repo popularity

The repository has only 1 star, 0 forks, and 0 watchers, indicating limited external adoption or review; popularity is supporting evidence rather than decisive evidence.

Repo tooling

Composer is used as a build tool, but no security-scanning tools are configured; the missing scanning coverage is a security-hygiene gap rather than evidence of abandonment.