Package Health/pop-schema/custompostmedia-wp

pop-schema/custompostmedia-wp

This is a generally healthy and actively maintained release: it has over five years of history, 162 releases, 33 releases in the last 12 months, a stable non-prerelease version, a non-archived repository, explicit GPL licensing, tests, and recent commit activity. The main concerns are that all 14 recent commits came from one contributor, the repository has no security scanning or security policy, and the package has no changelog; the organization-owned repository provides some backing, but does not eliminate the single-contributor risk. Overall, it appears reasonable to depend on, with normal care around maintainer concentration and security-process maturity.

Latest 19.2.4

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access. This is a minor operational concentration concern, although registry access records do not establish actual maintenance activity and the repository is organization-owned.

Package scaffolding

The artifact and repository include a README and tests, and the README documents development, testing, issue reporting, and security contact practices. A changelog is absent, which is a modest transparency gap, but the other documentation is substantial.

Repo bus factor

One contributor made all 14 commits in the last 3 months, creating a real continuity risk. Organization ownership provides some potential handoff capacity, but no second active contributor is shown, so the concentration remains a caution.

Repo issue activity

There were no new or merged pull requests and no new or closed issues in the last month, while open issue count is unknown. This is limited evidence of community activity, but it is not sufficient by itself to indicate abandonment given the recent release and commit history.

Repo popularity

The repository has only 1 star, 0 forks, and 1 watcher. Low popularity is supporting evidence rather than a verdict, but it provides little external adoption signal.