Package Health/pop-wp-schema/commentmeta

pop-wp-schema/commentmeta

This is a healthy, actively maintained release with a strong publication history: 145 releases over roughly 3 years, 33 releases in the last 12 months, a stable major version, and a release pushed very recently. The package is licensed, has a README, tests in the repository, a focused file tree, no install-time lifecycle scripts, and a non-archived organization-owned repository that matches and documents the package. The main concerns are that all 14 recent commits came from one contributor and the repository has no security policy or security-scanning tooling; these warrant operational caution but are partly offset by the organization backing and sustained release activity.

Latest 19.2.4

Packagist

84%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made all 14 commits in the last 3 months, creating a genuine continuity and bus-factor concern. Organization backing partly mitigates handoff risk but does not remove dependence on the current contributor.

Repo popularity

The repository has zero stars and forks and one watcher. This is weak supporting evidence, but popularity is not decisive and is outweighed by the package's release and commit activity.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning coverage is a transparency and process gap, though it is not by itself evidence that the package is unsafe.

Security policy

The repository has no SECURITY.md or equivalent security policy, leaving vulnerability-reporting and response expectations undocumented.