pop-schema/post-tags

This is a healthy, actively maintained release with a substantial history: 161 releases over roughly 5 years, 33 releases in the last 12 months, and a latest release published at assessment time. The package is stable, licensed, non-deprecated, linked to an active organization-owned repository, and includes a README, tests, source files, and Composer build tooling. The main concerns are that all 15 commits in the last 3 months came from one contributor and the repository has no formal security policy or security-scanning tooling; these are meaningful resilience and transparency gaps, but they are partly offset by the organization backing, ongoing release cadence, repository activity, and clear package-to-repository alignment.

Latest 19.2.4

Packagist

86%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made all 15 commits in the last 3 months, creating a genuine continuity risk; organization ownership partly compensates because maintenance can potentially be handed off within the project.

Repo issue activity

There were no new issues or pull requests in the last month and no merged pull requests; this provides little evidence of community engagement, but it is not by itself evidence of abandonment because commits and releases remain active.

Repo popularity

The repository has only 1 star and no forks, so external adoption evidence is weak; however, popularity is supporting evidence and does not outweigh the package's strong release and commit activity.

Repo tooling

Composer is used as a build tool, but no security-scanning tools are configured. The build tooling is healthy, while the missing scanning coverage is a modest transparency and supply-chain hygiene gap.

Security policy

The repository has no formal security policy, leaving vulnerability-reporting and response expectations less explicit despite the README providing an email-based security contact.