pop-schema/menus-wp

This is a generally healthy and actively maintained release: it has a five-year history, 162 releases, 33 releases in the last 12 months, stable versioning, current repository activity, an unarchived organization-owned source repository, a matching package mention, and clear licensing. The main concerns are concentrated maintenance, with all 14 recent commits from one contributor, limited repository popularity, no security scanning or repository security policy, and no changelog in either the artifact or repository. These are meaningful transparency and resilience gaps, but they do not outweigh the strong release cadence and evidence of ongoing maintenance.

Latest 19.2.4

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The artifact includes a README and tests, and the repository also has tests; the absence of a changelog is a modest transparency gap because the README points users to a changelog that is not present in the collected repository or artifact.

Repo bus factor

All 14 commits in the last 3 months came from one contributor, with a 100% top-contributor share and no second recent contributor; organization ownership offers some backing but does not remove this resilience concern.

Repo popularity

The repository has only 1 star, 0 forks, and 1 watcher, indicating limited external adoption or visibility; this is supporting caution rather than a decisive health failure.

Repo tooling

Composer is used as a build tool, but no security scanning tools are reported, leaving a security-process gap.

Security policy

The repository has no SECURITY.md or other detected security policy, reducing transparency about vulnerability reporting and response.