Package Health

pop-schema/queriedobject

This is a healthy, actively maintained release with a strong release history: the package is over five years old, has 162 releases, 33 releases in the last 12 months, and was updated very recently. It is not deprecated or archived, has a stable major version, an explicit GPL-2.0-or-later license with a license file, a small runtime dependency surface, repository tests, and no install-time lifecycle scripts. The main concerns are concentrated maintenance activity from one contributor, no repository security policy or security scanning, and no changelog in the collected package or repository metadata; however, organization ownership, direct package/repository alignment, recent commits, and documented testing and release practices substantially mitigate these concerns.

Latest 19.2.4PackagistPackagist

84%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

83

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Package scaffoldingcaution

A substantial README and tests are present in both the artifact and repository. A changelog is not present in the collected metadata, but the documentation directs users to a changelog, so this is a limited transparency gap.

Repo bus factorcaution

All 15 recent commits came from one contributor, creating a genuine continuity risk. Organization ownership provides some maintenance handoff potential, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are reported, leaving a security-process transparency gap.

Security policycaution

No repository security policy was found, which weakens the documented process for reporting and handling vulnerabilities even though the README provides a security contact.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Leonardo Losoviz

Direct Dependencies

DependencyLast ReleaseScore
pop-cms-schema/schema-commons
Version ^19.2.4
—
—

Weekly Downloads

Info

Last Published
19 days ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform