pop-cms-schema/usermeta

This is a mature and actively released package with a release history dating to 2021, 162 releases, 33 releases in the last 12 months, a stable current version, and no registry deprecation. The linked repository is active, correctly associated with the package, organization-backed, and contains tests, build configuration, and a clear README. The main reservations are that recent commits come from one contributor, no security scanning or security policy is present, and no changelog is included despite the README referring to one; these are meaningful transparency and resilience gaps but are outweighed by sustained release activity, recent repository activity, licensing, and organizational backing.

Latest 19.2.4

Packagist

84%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The artifact has a substantial README and tests, and the README documents installation, usage, testing, analysis, and security reporting. A changelog is absent both from the package and repository, despite the README referring to one, which is a modest transparency gap.

Repo bus factor

All 15 recent commits came from one contributor, creating concentration risk; however, the repository is organization-owned, so this is a resilience concern rather than a severe abandonment indicator.

Repo popularity

The repository has only 1 star and no forks, indicating limited external adoption. Popularity is supporting evidence rather than a decisive health criterion, so this lowers confidence more than it lowers health materially.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The build setup is appropriate, while the missing security automation is a maintenance and assurance gap.

Security policy

The repository has no SECURITY.md or other detected security policy, leaving vulnerability reporting and response expectations less transparent.