Package Health

pop-schema/pages-wp

This is a healthy, actively maintained Composer package with a mature release history: 162 releases since January 2021, 33 releases in the last 12 months, and a latest release published on the assessment date. It has a stable non-prerelease version, a clear GPL license, README and test presence, minimal runtime dependencies, no install-time scripts, no deprecation notice, and a repository that matches the package and is actively updated. The main concerns are concentrated maintenance: all 14 commits in the last three months came from one contributor, the repository has no security policy or security-scanning tooling, and its very low popularity provides little external validation. These are meaningful but do not outweigh the strong release and maintenance evidence, particularly given the organization-owned repository backing.

Latest 19.2.4PackagistPackagist

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

90

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Repo bus factorcaution

All 14 recent commits came from one contributor, creating a genuine continuity risk. The organization-owned repository provides some ability to hand maintenance off, but no second active contributor is shown.

Repo popularitycaution

The repository has only 1 star, 1 fork, and 1 watcher, providing little external validation. This is supporting evidence rather than a health verdict, and the package's active release and commit history compensates for its small audience.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are reported. The build setup supports maintainability, while the missing scanning capability leaves a modest security-hygiene gap.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations less transparent for dependents.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Leonardo Losoviz

Direct Dependencies

DependencyLast ReleaseScore
pop-cms-schema/pages
Version ^19.2.4
—
—
pop-cms-schema/customposts-wp
Version ^19.2.4
—
—

Weekly Downloads

Info

Last Published
19 days ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform