Package Health/pop-schema/post-categories

pop-schema/post-categories

This is a healthy, mature release with a strong maintenance record: it has existed for over 5 years, has 154 releases including 33 in the last 12 months, and the current stable major version is actively maintained. The package is licensed, has a focused 41-file implementation with tests, uses Composer without install-time lifecycle scripts, and is backed by a non-archived organization-owned repository that was pushed recently. The main concerns are concentrated recent contribution in one individual, very low repository popularity, and the absence of repository security-scanning tooling and a security policy; these reduce resilience and transparency but do not outweigh the sustained release and commit activity.

Latest 19.2.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Maintainers

Only one account has registry publish access, which is a caution for publishing continuity. However, the repository is organization-owned and the package shows substantial recent release activity, so this is not by itself evidence of abandonment.

Repo bus factor

All 15 recent commits came from one contributor, giving a 100% top-contributor share and creating a genuine continuity risk. Organization ownership partly compensates because maintenance can potentially be transferred, but no second active contributor is shown.

Repo popularity

The repository has only 2 stars, 0 forks, and 1 watcher. Low popularity provides little external validation and modestly increases adoption risk, though popularity is supporting evidence rather than a health verdict.

Repo tooling

Composer build tooling is present, but no security-scanning tools are detected. The missing scanning automation is a transparency and assurance gap, though it is not evidence of unsafe behavior on its own.