Package Health/pop-wp-schema/customposts

pop-wp-schema/customposts

This is a healthy, actively maintained release with a mature history: 151 releases over roughly 5 years, 33 releases in the last 12 months, and a latest release on the assessment date. The package is licensed, has a matching repository with tests and a clear README, uses Composer without install-time lifecycle scripts, is not deprecated or archived, and is backed by an organization-owned repository. The main concerns are concentrated maintenance in one active contributor, very low repository popularity, no repository security policy or security-scanning tooling, and no changelog; however, the strong release cadence, recent commits, repository backing, and consistent package structure substantially mitigate these concerns.

Latest 19.2.4

Packagist

86%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Repo bus factor

All 15 recent commits came from one contributor, creating a genuine continuity risk. The repository is owned by an organization, which provides some ability to hand maintenance off and partially compensates for the concentration.

Repo issue activity

There are no open issues or pull requests and no issue or pull-request activity in the last month. This is not negative by itself because recent commits and releases demonstrate active maintenance, but it provides little evidence of a broader support community.

Repo popularity

The repository has only 2 stars, 0 forks, and 1 watcher, indicating limited adoption evidence. Popularity is supporting evidence rather than a decisive health criterion, so this warrants only a modest concern.

Repo tooling

Composer is used as a build tool, which is appropriate for this PHP package, but no security-scanning tooling is detected. The missing scanning layer is a supply-chain hygiene gap rather than evidence of abandonment.