Package Health/pop-schema/schema-commons

pop-schema/schema-commons

This release appears healthy and suitable for dependency use: it has a long release history with 162 releases, 33 releases in the last 12 months, a stable non-prerelease version, recent repository activity, an active non-archived source repository, tests, a matching repository reference, and clear licensing. The main concerns are that all 16 recent commits came from one contributor, the repository has no security scanning or security policy, and the package lacks a changelog; these are meaningful transparency and resilience gaps, but the organization-owned repository, ongoing release cadence, and existing tests provide substantial compensating evidence.

Latest 19.2.4

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

All 16 recent commits came from one contributor, creating a genuine continuity risk. Organization ownership provides some handoff potential, but no second active contributor is shown in this signal.

Repo popularity

The repository has only 2 stars, 0 forks, and 1 watcher, indicating limited external adoption. Popularity is supporting evidence rather than a verdict, so this is a modest caution rather than a severe risk.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured. This lowers security-process transparency, though it does not by itself indicate abandonment or unsafe code.

Security policy

The repository has no SECURITY.md or other detected security policy, leaving vulnerability reporting and response expectations less transparent.