Package Health/pop-schema/custompost-tags-wp

pop-schema/custompost-tags-wp

This is a healthy, actively maintained Composer package with a long release history, 154 releases since 2021, 33 releases in the last 12 months, and a recent stable release. The linked organization-owned repository is not archived, matches the package, and explicitly documents the package; licensing, README coverage, tests, build tooling, and dependency scope are also solid. The main concerns are that all 14 recent commits came from one contributor, there is no changelog or repository security policy, and repository popularity is very low, but these are mitigated by ongoing release and commit activity and organization backing. It appears reasonable to depend on, subject to normal review of its small contributor base and limited security-process transparency.

Latest 19.2.4

Packagist

88%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry publishing maintainer is listed, which is a limited publishing base. However, this is less concerning because the linked repository is owned by an organization and the package shows substantial ongoing release activity.

Repo bus factor

All 14 commits in the last 3 months came from one contributor, creating a concentrated operational dependency. Organization ownership provides some potential handoff capacity, but no second active contributor is observed.

Repo popularity

The repository has only 2 stars, 0 forks, and 1 watcher, indicating limited public adoption or visibility. Popularity is supporting evidence rather than a decisive health measure, and active releases compensate for much of this concern.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The missing scanning automation is a process gap, although it is not by itself evidence of poor package health.

Security policy

The linked repository has no SECURITY.md or other detected security policy, reducing transparency about vulnerability reporting and response procedures.