pop-schema/customposts

This release appears suitable to depend on: it has a mature history since 2021, 161 releases including 33 in the last 12 months, a stable non-prerelease version, no registry deprecation, recent repository activity, an organization-owned source repository, and clear package/repository alignment. The main concerns are that all 16 commits in the last three months came from one contributor, the repository has very little public popularity, and no security policy or security-scanning tooling was observed. These are meaningful resilience and transparency gaps, but they are outweighed by the strong release cadence, active repository, licensing, tests, and straightforward Composer dependency profile.

Latest 19.2.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made all 16 commits in the last three months, creating a clear concentration and continuity risk; organization backing provides some mitigation but does not remove the single-contributor exposure.

Repo issue activity

There were no new issues or pull requests in the last month and no merged pull requests, so external collaboration is limited; this is partly offset by 16 recent commits.

Repo popularity

The repository has only 2 stars, 0 forks, and 1 watcher, indicating limited external adoption or review; this lowers supporting confidence but is not decisive for a small specialized package.

Repo tooling

Composer build tooling is present, but no security-scanning tools were observed, leaving a security-process gap despite the package's otherwise coherent build setup.

Security policy

The repository has no security policy, which weakens vulnerability-reporting transparency and response expectations.