pop-schema/meta

This is a mature, actively released package with 162 releases over roughly 5.6 years, 33 releases in the last 12 months, a stable non-prerelease version, recent repository activity, clear licensing, and no registry deprecation. The package and repository are well aligned, include tests and build configuration, and have no install-time lifecycle scripts or dangerous workflows. The main concerns are that all 17 recent commits came from one contributor, the repository has no security policy or security-scanning tooling, and repository popularity is low; however, organization ownership, sustained release activity, and current maintenance materially reduce the abandonment risk. Overall, it appears suitable to depend on, with normal supply-chain due diligence recommended.

Latest 19.2.4Packagist

Health Score Breakdown

Repo bus factorcaution

All 17 recent commits came from one contributor, creating a genuine continuity risk; organization ownership and the package's sustained release cadence partly compensate but do not eliminate the concentration.

Repo popularitycaution

The repository has only 2 stars, 0 forks, and 1 watcher, so external adoption and independent visibility appear limited; popularity is supporting evidence rather than a decisive health verdict.

Repo toolingcaution

Composer build tooling is present, supporting reproducible project operations, but no security-scanning tooling is configured, leaving a security-hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response procedures.

View all 20 health checks

Vulnerabilities

We didn't find any vulnerabilities for this package.

Maintainers

Leonardo Losoviz

Direct Dependencies

Dependency	Last Release	Score
getpop/engine Version ^19.2.4	—	—
pop-cms-schema/schema-commons Version ^19.2.4	—	—
pop-schema/extended-schema-commons Version ^19.2.4	—	—