pop-schema/posts-wp

This is a mature, actively released, stable package with 162 releases since January 2021, 33 releases in the last 12 months, a current non-prerelease major version, and a repository that is neither archived nor disconnected from the package. Its organization-owned repository, matching package name, license file, tests, Composer build tooling, and absence of install-time scripts provide useful transparency and reduce adoption risk. The main concerns are that all 14 recent commits came from one contributor, the repository has no security scanning or security policy, and repository popularity is very low; these are meaningful resilience and hygiene gaps, but they are not outweighed by abandonment evidence because release activity remains strong and the organization provides project backing.

Latest 19.2.4

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access, which is a modest publishing-resilience concern; however, the source repository is organization-owned and the strong release history shows active publishing rather than abandonment.

Repo bus factor

One contributor made 100% of the 14 commits in the last 3 months. Organization ownership provides some ability to hand maintenance off, but no second active contributor is shown, so the concentration remains a real resilience concern.

Repo popularity

The repository has only 1 star, 0 forks, and 1 watcher, indicating a small user and contributor footprint; popularity is supporting evidence, so this lowers confidence in ecosystem resilience but is not itself abandonment evidence.

Repo tooling

Composer is used as a build tool, but no security scanning tools are reported; the build process is established while automated security hygiene is limited.

Security policy

The repository has no published security policy, leaving vulnerability-reporting and response expectations less transparent for dependents.