Package Health/pop-schema/custompostmedia

pop-schema/custompostmedia

This is a healthy, actively maintained release with a long history, 162 releases since January 2021, 33 releases in the last 12 months, stable versioning, recent repository activity, clear licensing, tests, and no install-time lifecycle scripts. The main adoption risks are concentrated maintenance in one contributor, very low repository popularity, no security policy or security scanning, and limited repository issue/PR activity; these warrant caution but are partly mitigated by organization ownership and the package's strong release cadence. Overall, it appears reasonable to depend on, subject to normal contingency planning for single-maintainer continuity.

Latest 19.2.4

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Maintainers

Only one registry account has publish access, which creates publisher continuity risk. However, the repository is organization-owned and the package has strong recent release activity, so this is a caution rather than a severe health failure.

Repo bus factor

One contributor made all 15 commits in the last 3 months, giving the project a bus factor of one and creating a meaningful continuity risk. Organization ownership provides some handoff potential, but no second active contributor is shown.

Repo issue activity

There were no new issues or pull requests and no merged pull requests in the last month. This provides little evidence of an active external contributor or support community, although it does not contradict the observed release and commit activity.

Repo popularity

The repository has only 1 star, 0 forks, and 1 watcher, indicating limited external adoption or visibility. Popularity is supporting evidence rather than a verdict, so this modestly lowers confidence and health but is not independently disqualifying.

Repo tooling

Composer is used as a build tool, but no security-scanning tools are detected. The missing scanning coverage is a supply-chain hygiene gap, though it is not evidence of maliciousness or abandonment.