Package Health/pop-schema/queriedobject-wp

pop-schema/queriedobject-wp

This is a healthy, actively maintained release with a substantial history: 161 releases over roughly 5 years, 33 releases in the last 12 months, and a latest release published at assessment time. The package is stable, not deprecated, licensed, directly backed by an organization-owned repository, and has matching source, tests, and documented development practices. The main concerns are maintenance concentration in one active contributor, no repository security policy or security-scanning tooling, and very low repository popularity, although the organization's backing and frequent releases substantially reduce abandonment risk. Overall, it appears reasonable to depend on, with normal supply-chain review and monitoring recommended.

Latest 19.2.4

Packagist

86%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made all 14 commits in the last 3 months, creating a genuine concentration and continuity risk. The organization-owned repository and frequent release history partly mitigate the risk but do not remove it.

Repo popularity

The repository has zero stars and forks and only one watcher. This limits popularity-based corroboration, but popularity is supporting evidence and does not outweigh the package's strong release and commit activity.

Repo tooling

Composer is used as a build tool, supporting a standard reproducible package workflow, but no security-scanning tools are configured. The missing scanning is a hygiene gap rather than evidence of abandonment.

Security policy

The repository has no SECURITY.md or other detected security policy. The README provides a security contact, which offers some disclosure guidance, but the repository-level policy gap remains.