pop-cms-schema/tags-wp

This is a healthy, mature release with a strong maintenance record: it has existed since 2021, has 162 releases including 33 in the last 12 months, publishes stable versions, is not deprecated, and is backed by an active non-archived repository with recent commits. Licensing, package structure, dependency scope, and install behavior are clear, and the repository matches and explicitly documents the package. The main concerns are that all 15 recent commits came from one contributor, there is no security policy or security-scanning tooling, and no changelog was detected; the organization-owned repository provides some backing but does not eliminate the single-contributor risk. Overall, it is reasonable to depend on, with normal resilience and security-transparency caveats.

Latest 19.2.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

A substantial README and tests are present in both the artifact and repository. The missing changelog is a modest transparency gap, although the package documentation explains where changes are tracked.

Repo bus factor

One contributor made 100% of the 15 commits in the last three months, creating a meaningful continuity risk. Organization ownership provides some potential handoff capacity, but no second active contributor is shown.

Repo commit activity

The repository recorded 15 commits in the last three months, demonstrating current activity, but all were produced by one active maintainer.

Repo issue activity

There were no new issues or pull requests in the last month and no merged pull requests, so external collaboration evidence is limited; this is softened by 15 recent commits and the absence of pending pull requests.

Repo popularity

The repository has only 1 star and no forks or watchers. This is weak supporting evidence, but popularity is not decisive and the package's release and commit activity compensate for its small public footprint.