Package Health/pop-wp-schema/custompostmeta

pop-wp-schema/custompostmeta

This is a generally healthy and actively maintained release: it has 145 releases over roughly 3.7 years, 33 releases in the last 12 months, a stable non-prerelease version, current repository activity, an organization-owned non-archived repository, clear licensing, and a package-specific repository with tests. The main risks are maintenance concentration in one contributor, very low repository popularity, no security scanning or security policy, and no changelog in the collected package tree; these warrant caution but are outweighed by the strong release cadence and recent activity. The package appears reasonable to depend on, with normal supply-chain diligence recommended.

Latest 19.2.4

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Repo bus factor

All 14 recent commits came from one contributor, creating a genuine bus-factor risk. The organization-owned repository partly compensates because maintenance can potentially be handed off within the organization.

Repo popularity

The repository has zero stars and forks and only one watcher. This limits external validation and visibility, although popularity is supporting evidence and does not outweigh the demonstrated release and commit activity.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The missing scanning reduces security-process transparency, though it is not evidence that the package is malicious.