This is a generally healthy and actively maintained release: it has a long history, 154 releases including 33 in the last 12 months, a stable non-prerelease version, an active non-archived repository, and recent commits. The main risks are concentrated maintenance—14 commits from one contributor in the last 3 months—and limited repository transparency, including no security policy, no changelog, and no repository README reference to the exact package. Organization ownership and the package's tests, license, Composer tooling, and lack of install-time scripts partly compensate for those concerns, making it usable but worth monitoring for maintainer continuity.
78%
Total Score
80
100
83
90
Only one registry account has publish access, which is a concentration concern in isolation. The repository is organization-owned, making a short registry maintainer list more understandable, but it does not remove the continuity risk.
The artifact and repository have matching, compact file trees containing source code, configuration, a license, README, and tests, which supports reproducible package structure. The only test file is named ModuleTestDisabled.php, so test coverage should not be assumed to be comprehensive.
One contributor made 100% of the 14 commits in the last 3 months, creating a genuine bus-factor concern. Organization ownership provides some potential handoff capacity, but no second active contributor is evidenced.
The repository name does not match the package name and its README does not mention the package, so the linkage is less transparent and the package may not be directly represented by that repository. The README nevertheless identifies the broader GatoGraphQL monorepo as the source location, which provides partial context but does not fully resolve the mismatch.
The repository has no stars or forks and only one watcher, indicating limited external adoption or visibility. Popularity is supporting evidence rather than a verdict, so this is a modest concern rather than a severe health risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pop-cms-schema/category-mutations-wp Version ^19.2.4 | — | — |
pop-cms-schema/custompost-mutations-wp Version ^19.2.4 | — | — |
pop-cms-schema/custompost-categories-wp Version ^19.2.4 | — | — |
pop-cms-schema/custompost-category-mutations Version ^19.2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.