This release appears healthy and suitable for dependency use: it has a five-year history, 161 releases, 32 releases in the last 12 months, a stable non-prerelease version, recent repository activity, a matching and explicitly documented source repository, and organizational backing. The main risks are maintenance concentration in one active contributor, minimal repository adoption, no repository security policy or security scanning, and a test file marked disabled; these reduce resilience and transparency but do not outweigh the strong release and maintenance evidence.
82%
Total Score
70
89
90
Only one registry account has publish access, which creates publishing continuity risk. However, this is partly compensated by the linked repository being owned by an organization and by the strong recent release activity.
One contributor made all 14 commits in the last 3 months, creating a concentrated bus factor. Organizational ownership provides some handoff capacity, but no second active contributor is evidenced.
There were no new or closed issues and no pull-request activity in the last month, while the open pull-request count is zero. This provides little evidence of community engagement, though it does not contradict the separate evidence of active releases and commits.
The repository has only 2 stars, 0 forks, and 1 watcher, indicating limited visible adoption. Popularity is supporting evidence rather than a decisive health criterion, especially for a focused component.
Composer is used as a build tool, which fits the PHP package, but no security scanning tools are reported. The missing scanning is a hygiene gap rather than evidence of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pop-cms-schema/media-wp Version ^19.2.3 | — | — |
pop-cms-schema/custompostmedia-wp Version ^19.2.3 | — | — |
pop-cms-schema/custompost-mutations-wp Version ^19.2.3 | — | — |
pop-cms-schema/user-state-mutations-wp Version ^19.2.3 | — | — |
pop-cms-schema/custompostmedia-mutations Version ^19.2.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.