This is a healthy, actively maintained Composer package with a mature release history: 162 releases since January 2021, 33 releases in the last 12 months, and a latest release published on the assessment date. It has a stable non-prerelease version, a clear GPL license, README and test presence, minimal runtime dependencies, no install-time scripts, no deprecation notice, and a repository that matches the package and is actively updated. The main concerns are concentrated maintenance: all 14 commits in the last three months came from one contributor, the repository has no security policy or security-scanning tooling, and its very low popularity provides little external validation. These are meaningful but do not outweigh the strong release and maintenance evidence, particularly given the organization-owned repository backing.
82%
Total Score
90
100
89
90
All 14 recent commits came from one contributor, creating a genuine continuity risk. The organization-owned repository provides some ability to hand maintenance off, but no second active contributor is shown.
The repository has only 1 star, 1 fork, and 1 watcher, providing little external validation. This is supporting evidence rather than a health verdict, and the package's active release and commit history compensates for its small audience.
Composer build tooling is present, but no security-scanning tools are reported. The build setup supports maintainability, while the missing scanning capability leaves a modest security-hygiene gap.
The repository has no security policy, leaving vulnerability-reporting expectations less transparent for dependents.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pop-cms-schema/pages Version ^19.2.4 | — | — |
pop-cms-schema/customposts-wp Version ^19.2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.