Package Health

pop-schema/directive-commons

This is a healthy, mature release with a five-year history, 163 releases, 33 releases in the last 12 months, a stable non-prerelease version, active recent publishing, and an unarchived repository that matches the package and documents it. The package includes a license, README, tests, Composer build metadata, and no install-time lifecycle scripts. The main concerns are that all 15 commits in the last three months came from one contributor, the repository has no security-scanning tooling or security policy, and no changelog is present despite being referenced in the README; organizational ownership and strong release activity partially mitigate the maintainer-concentration concern.

Latest 19.2.4PackagistPackagist

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

70

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Maintainerscaution

Only one registry account has publish access, but this is partly mitigated by the linked repository being owned by an organization and by strong observed release activity; it remains a modest publishing-continuity concern.

Package scaffoldingcaution

A substantive README and tests are present in both the artifact and repository, although no changelog was detected despite the README referring to one, leaving a minor documentation gap.

Repo bus factorcaution

One contributor made all 15 commits in the last three months, creating a genuine continuity risk. Organizational repository ownership provides some handoff potential, but no second active contributor is shown.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month and no merged pull requests; this provides little evidence of community interaction, though it is not by itself evidence of abandonment.

Repo popularitycaution

The repository has one star, zero forks, and one watcher. This indicates limited adoption evidence, but popularity is supporting evidence and does not outweigh the package's substantial release and maintenance history.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Leonardo Losoviz

Direct Dependencies

DependencyLast ReleaseScore
pop-schema/extended-schema-commons
Version ^19.2.4
—
—

Weekly Downloads

Info

Last Published
19 days ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform