pop-schema/taxonomyquery

This is a generally healthy, actively maintained Composer package with over five years of history, 162 releases, 33 releases in the last 12 months, a stable non-prerelease version, and a recent repository push. The package and repository are licensed, aligned, and include README and test-related scaffolding, while the organization-owned repository provides useful project backing. The main concerns are that all 14 recent commits came from one contributor, the repository has minimal popularity and no recorded issue or pull-request activity, no security policy or security-scanning tooling was observed, and no changelog is present. These are meaningful transparency and resilience gaps, but they do not outweigh the strong release continuity and current maintenance evidence.

Latest 19.2.4

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Maintainers

Only one registry account has publish access, which is a resilience concern in isolation. However, the source repository is organization-owned and the package has strong recent release activity, partly compensating for the narrow registry publisher base.

Repo bus factor

One contributor made 100% of the 14 recent commits, creating a clear single-maintainer continuity risk. Organization ownership provides some ability to hand off maintenance, so this is caution rather than severe risk.

Repo commit activity

The repository recorded 14 commits in the last three months, showing current activity, but all were made by one active maintainer. The activity is positive while the concentration limits resilience.

Repo issue activity

There were no new or closed issues or pull requests in the last month and no merged pull requests, suggesting little visible community activity. The null open-issue count is unknown rather than negative evidence.

Repo popularity

The repository has only 1 star, 0 forks, and 1 watcher, indicating limited external adoption or visibility. Popularity is supporting evidence rather than a verdict, so this is a modest concern given the strong release history.