pop-schema/taxonomies

This is a mature and actively maintained release: it has existed since January 2021, has 162 releases including 33 in the last 12 months, was published recently, is stable rather than prerelease, is not deprecated, and the linked organization-owned repository was updated at release time. Licensing, package structure, tests, and build tooling are present, with no install-time lifecycle scripts and no repository/package mismatch. The main concerns are that all 15 commits in the last 3 months came from one contributor, the repository has no security scanning or security policy, and neither the artifact nor repository provides a changelog despite the README referring to one. Low popularity is only supporting context, not a decisive risk, and the organization backing partly offsets the single-contributor concentration.

Latest 19.2.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access, which is a concentration concern, but the linked repository is owned by an organization and observed release activity is strong.

Package scaffolding

A substantive README and tests are present in both the artifact and repository, but no changelog is present in either despite the README referring users to one; this is a modest transparency gap.

Repo bus factor

One contributor made 100% of the 15 recent commits, creating a real continuity risk; organization ownership provides some handoff capacity but no second active contributor is observed.

Repo commit activity

The repository recorded 15 commits in the last 3 months from one active maintainer, demonstrating recent maintenance but limited contributor breadth.

Repo popularity

The repository has only 1 star and no forks, indicating limited public adoption signals; this is supporting evidence rather than a health verdict, especially given the package's active release history.