Package Health/pop-schema/custompostmeta

pop-schema/custompostmeta

This is a mature, actively released, non-deprecated package with a stable major version, a clear GPL license, repository-backed development, tests, and recent commit activity. The main concerns are that all 15 commits in the last three months came from one contributor, the repository has very low popularity, no security policy or security-scanning tooling was observed, and no changelog is present; however, the organization-owned repository, long release history, ongoing releases, and repository tests substantially reduce abandonment and transparency risk. It appears suitable to depend on, with normal diligence around its concentrated maintenance base and security process.

Latest 19.2.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made all 15 commits in the last three months, creating a concentrated maintenance dependency; organization ownership partly mitigates handoff risk but does not eliminate it.

Repo commit activity

The repository recorded 15 commits in the last three months, demonstrating recent activity, but all were made by one active maintainer.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while the open pull-request count is zero. This offers little evidence of community activity, but does not conflict with the package's active release and commit history.

Repo popularity

The repository has only 2 stars, 0 forks, and 1 watcher, indicating limited external adoption or visibility; this is a supporting caution rather than a health verdict.

Repo tooling

Composer is used as a build tool, but no security-scanning tools were detected. Build tooling is appropriate, while the missing security automation is a modest process gap.