Package Health/pop-cms-schema/user-state-mutations-wp

pop-cms-schema/user-state-mutations-wp

This is a mature, actively released, stable package with 162 releases since 2021, 33 releases in the last 12 months, a current non-archived repository, an explicit GPL license, repository-backed tests, and no install-time lifecycle scripts. The main concerns are that all recent repository commits come from one contributor, the repository has no security scanning or security policy, and the package has no changelog; however, the organization-owned repository, strong release cadence, and package/repository alignment materially reduce abandonment and transparency risk. It appears reasonable to depend on, with normal due diligence around maintainer concentration and security practices.

Latest 19.2.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

All 15 recent commits came from one contributor, creating a genuine bus-factor concern; organization ownership and the active release cadence provide partial compensation but do not remove the concentration risk.

Repo issue activity

There were no new or closed issues or pull requests in the last month, and no pull requests were open; this does not establish abandonment because commit and release activity remain strong, but it provides little evidence of a broader maintenance community.

Repo popularity

The repository has zero stars and forks and one watcher, showing limited external popularity; this is supporting evidence only and is outweighed by the package's release history and current activity.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a security-process gap despite otherwise adequate build support.

Security policy

The repository has no SECURITY.md or other detected security policy, reducing transparency around vulnerability reporting and response.