Package Health/pop-schema/user-avatars-wp

pop-schema/user-avatars-wp

This is a healthy, actively maintained release with a substantial history since 2021, 154 releases, 33 releases in the last 12 months, and a stable non-prerelease version. The repository is active, unarchived, correctly associated with the package, backed by an organization, and the package includes a README, tests, licensing, and a modest dependency set. The main concerns are that all 14 recent commits came from one contributor, the repository has no security scanning or security policy, and there are no workflow safeguards to evaluate; these reduce resilience and transparency but do not outweigh the strong release and maintenance evidence.

Latest 19.2.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access, which is a modest publishing-resilience concern, but the repository is organization-owned and shows active recent development.

Repo bus factor

All 14 commits in the last 3 months came from one contributor, creating a genuine continuity risk; organization backing provides some capacity to hand maintenance off but does not remove the concentration.

Repo popularity

The repository has only 1 star, 0 forks, and 1 watcher. This is weak supporting evidence, but popularity is not decisive and the strong release and commit activity compensates for it.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured. This is a transparency and preventive-control gap rather than evidence of unsafe code.

Security policy

No security policy was found in the repository, reducing the clarity of vulnerability-reporting and response procedures; the README does provide an email-based security contact, which partly compensates.