pop-schema/tags-wp

This is a mature, actively released, stable package with 162 releases since 2021, 33 releases in the last 12 months, a recent push, a matching and documented source repository, an organization-owned project, a clear license, tests, and no install-time lifecycle scripts. The main concerns are that all 15 recent commits came from one contributor, the repository has very limited popularity, no security scanning or security policy was observed, and no changelog is present; these reduce resilience and transparency but are partly offset by the organization backing and strong release continuity. Overall, it appears reasonable to depend on, with normal diligence around maintainer concentration and security practices.

Latest 19.2.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access, which is a concentration concern, although this administrative list does not by itself establish maintenance capacity and the repository is organization-owned.

Repo bus factor

All 15 commits in the last three months came from one contributor, creating a genuine continuity risk. Organization ownership provides some ability to hand off maintenance, but no second active contributor is shown.

Repo issue activity

There were no new or closed issues and no pull requests in the last month, leaving issue-handling activity un demonstrated; the null open-issues value also limits interpretation.

Repo popularity

The repository has only 1 star, 0 forks, and 0 watchers. This is weak supporting evidence, but popularity is not decisive and is outweighed by the strong release and recent activity signals.

Repo tooling

Composer is used as a build tool, but no security scanning tool was observed. The absence of scanning is a security-process gap, though it is not evidence of maliciousness or abandonment.