pop-schema/settings-wp

This is a mature, actively released, stable package with 154 releases since 2021, 33 releases in the last 12 months, a current non-prerelease version, a non-archived repository, clear licensing, tests, and a matching source repository. The main concerns are that all 16 recent commits came from one contributor, the repository has no security scanning or security policy, and the project has negligible popularity metrics; however, organization ownership, consistent release activity, and the package's small, transparent file tree reduce the abandonment risk. It appears reasonable to depend on, with normal precautions around maintainer concentration and security process.

Latest 19.2.4

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access, which is a concentration concern, but repository activity is backed by an organization and the strong release cadence provides partial compensation.

Repo bus factor

One contributor made 100% of the 16 commits in the last 3 months, creating a meaningful continuity risk. Organization ownership offers some backing, but no second active contributor is shown.

Repo commit activity

The repository recorded 16 commits in the last 3 months, showing current development, but all activity came from one active maintainer.

Repo popularity

The repository has zero stars and forks and only one watcher, so there is little external adoption evidence. This is supporting evidence rather than a decisive concern for a small package with strong release activity.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured, leaving a security-process gap.