Package Health/pop-schema/basic-directives

pop-schema/basic-directives

This is a generally healthy and actively maintained release: it has over five years of history, 163 releases, 33 releases in the last 12 months, a stable version, current repository activity, tests, a clear license, and no deprecation or install-time lifecycle scripts. Adoption risk is moderated by all recent commits coming from one contributor, the absence of a repository security policy, and the linked repository not matching the package name or mentioning it in its README, although the organization-owned repository and package documentation provide some backing and context. The package appears reasonable to depend on, but users should monitor maintainer continuity and verify the repository/package relationship.

Latest 19.2.4

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made all 15 commits in the last three months. Organization backing provides some handoff capacity, but no second active contributor is shown, leaving a genuine continuity risk.

Repo package mention

The repository name does not match the package name and its README does not mention this package, raising uncertainty about whether the linked repository directly backs this release rather than being a related or parent project.

Repo popularity

The repository has one star and no forks, indicating limited public adoption; this is weak supporting evidence rather than a health verdict because the package otherwise shows active releases and maintenance.

Repo tooling

Composer is used as a build tool, but no security scanning tools are detected; for this small PHP package, the build tooling is adequate while security-tooling coverage remains limited.

Security policy

No repository security policy was found. The README provides a security contact, which partly compensates for the missing formal policy, but disclosure guidance is still less transparent than a dedicated policy.