Package Health/pop-schema/extended-schema-commons

pop-schema/extended-schema-commons

This is a healthy, actively maintained release with a substantial history of 145 releases over roughly 3 years, 33 releases in the last 12 months, a stable non-prerelease version, current repository activity, matching repository identity, tests, licensing, and no install-time lifecycle scripts. The main risks are maintenance concentration in one contributor, absence of repository security-scanning tooling and a formal security policy, and very low repository popularity; these are meaningful transparency and continuity limitations but are partly offset by organization ownership, frequent releases, recent commits, and the repository's package-specific structure. It appears reasonable to depend on, while recognizing the single-contributor continuity risk.

Latest 19.2.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Maintainers

Only one registry account has publishing access, which is a continuity concern. However, the repository is owned by the PoPSchema organization, so the short registry access list is not by itself evidence of weak project backing.

Repo bus factor

One contributor made all 15 commits in the last 3 months, producing a 100% top-contributor share and a low bus factor. Organization ownership provides some ability to hand off maintenance, but no second active contributor is shown.

Repo popularity

The repository has only 1 star, 0 forks, and 1 watcher, indicating limited external adoption or visibility. Popularity is supporting evidence rather than a verdict, and the active release and commit history compensate for much of this concern.

Repo tooling

Composer build tooling is present, but no security-scanning tools are detected. This is a transparency and assurance gap, though it does not outweigh the package's active maintenance and test evidence.