Package Health/pop-cms-schema/user-state

pop-cms-schema/user-state

This is a healthy, actively maintained release with a five-year history, 162 releases, 33 releases in the last 12 months, stable versioning, a current non-archived source repository, and recent commit activity. The package is licensed, documented, tested in the repository, uses Composer without install-time lifecycle scripts, and has an organization-owned project backing that partly offsets its single-contributor concentration. The main concerns are that all 15 recent commits came from one contributor, the repository has no security scanning or security policy, and its very low popularity provides little external validation; these warrant review but do not outweigh the strong release and maintenance evidence.

Latest 19.2.4

Packagist

84%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one account has registry publish access, which is a modest publishing continuity concern, though the organization-owned repository provides compensating project backing.

Repo bus factor

One contributor made all 15 commits in the last 3 months, creating a real continuity risk; organization ownership provides some ability to hand off maintenance but no second active contributor is shown.

Repo issue activity

There were no new or closed issues or pull requests in the last month and no merged pull requests, but this is not sufficient to outweigh the separate evidence of 15 recent commits.

Repo popularity

The repository has only 1 star, 0 forks, and 1 watcher; this is weak external validation, although popularity is supporting evidence rather than a health verdict.

Repo tooling

Composer is used as a build tool, but no security scanning tools are configured, leaving a security-hygiene gap.