Package Health/pop-cms-schema/taxonomymeta

pop-cms-schema/taxonomymeta

This is a mature, actively maintained Composer package with a release history dating to 2021, 162 releases, 33 releases in the last 12 months, a stable non-prerelease version, and a current non-archived repository. Licensing, README documentation, tests, package structure, direct package identity, and lack of install-time lifecycle scripts are reassuring. The main concerns are that all 15 recent commits came from one contributor, the repository has no security scanning or security policy, and repository popularity is very low; however, the organization-owned project and strong release activity provide meaningful backing. Overall, it appears suitable to depend on, with some maintainer-concentration and security-process risk.

Latest 19.2.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made all 15 commits in the last 3 months, creating a genuine single-maintainer continuity risk. Organization ownership offers some backing, but no second active contributor is shown.

Repo popularity

The repository has only 2 stars, 0 forks, and 1 watcher, so external adoption and independent visibility appear limited. Popularity is supporting evidence rather than a decisive health criterion.

Repo tooling

Composer is used as a build tool, but no security-scanning tools are detected, leaving automated dependency or code-security checks unverified.

Security policy

The repository has no published security policy, leaving vulnerability-reporting and response expectations less transparent. The README does provide a security contact, which partially compensates for the missing formal policy.