Package Health/pop-cms-schema/taxonomies

pop-cms-schema/taxonomies

This is a healthy, actively maintained package with a release history dating to 2021, 162 releases, 33 releases in the last 12 months, and a recent stable release. It is not deprecated or archived, has a matching and package-specific source repository, includes licensing, tests, Composer-based build tooling, and no install-time lifecycle scripts. The main concerns are that all 15 recent commits came from one contributor, the repository has minimal popularity, and no security policy or security-scanning tooling was detected; these reduce resilience and transparency but do not outweigh the strong ongoing release and commit activity.

Latest 19.2.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made all 15 commits in the last 3 months, creating a genuine continuity risk. The organization-owned repository provides some potential handoff capacity, so this is caution rather than a severe health failure.

Repo popularity

The repository has 1 star, 0 forks, and 1 watcher, indicating very limited external adoption or review. Popularity is supporting evidence rather than a verdict, so this modestly lowers confidence and health but is not independently disqualifying.

Repo tooling

Composer build tooling is used, supporting reproducible project conventions, but no security-scanning tools were detected. The missing security automation is a transparency and defense-in-depth gap.

Security policy

The linked repository has no security policy. This leaves vulnerability reporting and coordinated disclosure less explicit, creating a hygiene concern for a dependency.