pop-schema/media-wp

This is a mature, actively released, non-deprecated package with 162 releases since 2021, 33 releases in the last 12 months, stable versioning, an explicit GPL license, a matching non-archived source repository, and recent commit activity. The main dependency risks are concentration of all recent commits in one contributor, absence of repository security scanning and a security policy, and limited repository activity beyond the primary maintainer; however, organization backing, ongoing releases, tests, build tooling, and the package's small focused scope provide meaningful compensation. It appears reasonable to depend on, with normal attention to maintainer continuity and security review.

Latest 19.2.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access, creating publishing concentration; this is partly compensated by the linked repository being owned by an organization and by strong recent release activity.

Package scaffolding

The artifact includes a README and tests, and the README documents development, testing, issue reporting, and security contact practices. A changelog is absent from both the artifact and repository, which is a modest transparency gap for an actively released package.

Repo bus factor

One contributor made all 14 commits in the last 3 months, creating a low individual bus factor. Organization ownership provides some handoff capacity, but no second active contributor is evidenced.

Repo issue activity

There were no new or merged pull requests in the last month and issue counts are unavailable, so collaborative maintenance activity is not demonstrated; this is partly offset by recent commits and frequent releases.

Repo popularity

The repository has only 1 star and 0 forks, so external adoption evidence is limited. For a small focused package, this is supporting evidence rather than a standalone health failure.