This is a healthy, mature release with a strong release cadence, stable versioning, clear licensing, repository alignment, tests, and no deprecation or archival indicators. The main concerns are concentrated maintenance—15 commits in the last 3 months all came from one contributor—and limited repository popularity, absent security scanning and security policy. Those concerns are moderated by the organization-owned repository, recent activity, a substantial 154-release history, and a well-scaffolded artifact, but dependency adoption should still account for the narrow active contributor base.
82%
Total Score
60
100
89
100
Only one registry account has publish access, which is a caution for publishing continuity. The organization-owned repository and strong observed release activity partly compensate, so this is not a severe health risk.
One contributor made all 15 commits in the last 3 months, creating a low individual bus factor. Organization ownership provides some potential handoff capacity, but no second active contributor is shown.
The repository recorded 15 commits in the last 3 months, demonstrating recent activity, but all activity came from one active maintainer. The recent work is reassuring while the concentration remains a maintenance concern.
There are no open issues or pull requests, and no issue or pull-request activity in the last month. This is not inherently unhealthy for a small stable component, but it provides limited evidence of active community feedback.
The repository has only 1 star, 0 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these very low counters provide little external adoption or redundancy evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pop-cms-schema/categories Version ^19.2.4 | — | — |
pop-cms-schema/taxonomy-mutations Version ^19.2.4 | — | — |
pop-cms-schema/custompost-mutations Version ^19.2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.