Package Health

pop-schema/custompost-tag-mutations

This is a healthy, actively maintained Composer package with a long release history, 154 releases since 2021, 33 releases in the last 12 months, a stable non-prerelease version, and a repository that is not archived and was pushed at the time of assessment. The package is licensed, includes tests and substantial source content, has no install-time lifecycle scripts, and its repository matches and documents the package. The main concerns are that recent commit activity is concentrated in one contributor, the repository has no security scanning or security policy, and the repository has very little public popularity; however, organization ownership, frequent releases, and direct package/repository alignment substantially reduce abandonment and transparency concerns.

Latest 19.2.4PackagistPackagist

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

70

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Maintainerscaution

Only one registry account has publish access, which is a modest publishing-continuity concern. The repository's organization ownership and frequent observed releases provide compensating evidence that this is not by itself a severe risk.

Repo bus factorcaution

All 15 recent commits came from one contributor, creating contributor-concentration risk. Organization ownership provides some ability to hand maintenance off, so this is a caution rather than a severe health failure.

Repo commit activitycaution

The repository recorded 15 commits in the last three months, demonstrating current activity, but all were made by one active maintainer.

Repo popularitycaution

The repository has zero stars and forks and one watcher, indicating limited public adoption or visibility. Popularity is supporting evidence rather than a verdict, so this is only a minor concern given the strong release activity.

Repo toolingcaution

Composer is used as a build tool, but no security-scanning tools are detected, leaving a security-process gap that modestly reduces transparency and assurance.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Leonardo Losoviz

Direct Dependencies

DependencyLast ReleaseScore
pop-cms-schema/tags
Version ^19.2.4
—
—
pop-cms-schema/taxonomy-mutations
Version ^19.2.4
—
—
pop-cms-schema/custompost-mutations
Version ^19.2.4
—
—

Weekly Downloads

Info

Last Published
19 days ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform