pop-schema/comments-wp

This is a generally healthy and actively maintained package: it has over five years of release history, 162 releases including 33 in the last 12 months, a stable non-prerelease version, a current non-archived repository, matching package documentation, tests, and recent commit activity. The main concerns are that all 14 recent commits came from one contributor, the repository has minimal popularity, and it lacks a security policy and security-scanning tooling; the organization-owned repository and sustained release cadence reduce but do not eliminate those risks. The absent changelog is a documentation gap, but the package otherwise presents clear licensing, source, build, and usage information.

Latest 19.2.4

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access, which is a concentration concern; however, this is partly compensated by the linked repository being owned by an organization and by the package's sustained release activity.

Repo bus factor

One contributor made all 14 commits in the last 3 months, creating a genuine continuity risk. The organization-owned repository provides some ability to transfer maintenance, so this is caution rather than severe risk.

Repo issue activity

There were no new or merged pull requests and no new or closed issues in the last month; this is limited evidence of community interaction, though it does not outweigh the package's active release and commit cadence.

Repo popularity

The repository has only 1 star, 0 forks, and 1 watcher. This is weak supporting evidence of adoption, but popularity alone is not decisive for a small specialized package.

Repo tooling

Composer is used as a build tool, which is appropriate for this PHP package, but no security-scanning tools are reported; the missing scanning is a supply-chain hygiene gap.