pop-schema/comment-mutations
This is a mature, actively released, stable package with a clear license, source repository, tests, substantial package contents, and no deprecation or archival indicators. Its main health concern is concentration of maintenance: all 16 commits in the last 3 months came from one contributor, and the repository has no security-scanning tooling or security policy. The organization-backed repository and very recent push activity provide meaningful compensation, so the package appears suitable to depend on with ordinary monitoring rather than being a clear abandonment risk.
82%
Total Score
88
100
89
90
Health Score Breakdown
One contributor made all 16 commits in the last 3 months, producing a 100% top-contributor share. This is a genuine continuity risk, though the organization-owned repository and ongoing release activity partially compensate.
The repository has only 2 stars, 0 forks, and 1 watcher, indicating limited external adoption or visibility. Popularity is supporting evidence rather than a verdict, so this is a modest caution rather than a severe health problem.
Composer is used as a build tool, but no security-scanning tools are configured. The lack of scanning lowers supply-chain transparency somewhat, though it is not evidence that the package is unsafe or unmaintained.
The repository has no published security policy. That is a real disclosure and maintenance-hygiene gap, but it is not severe enough to outweigh the package's active release history and current repository activity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Leonardo Losoviz |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 pop-cms-schema/comments Version ^19.2.4 | — | — |
pop-cms-schema/customposts Version ^19.2.4 | — | — |
pop-cms-schema/user-state-mutations Version ^19.2.4 | — | — |
Weekly Downloads
Info
- Last Published
- 17 days ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.