pop-wp-schema/media

This is a healthy, mature release with a strong maintenance record: it has existed for about 5 years, has 151 releases including 33 in the last 12 months, publishes a stable non-prerelease version, and was updated very recently. The package is licensed, documented, tested in both the artifact and repository, has no install-time lifecycle scripts, and is backed by an organization-owned repository that matches the package. The main concerns are concentrated recent contribution in one person, low repository popularity, and limited explicit security governance and automation, but these do not outweigh the clear release cadence and current activity.

Latest 19.2.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry publishing maintainer is listed, which is a resilience concern in isolation. The organization-backed repository and sustained release activity provide meaningful compensation, but registry publishing still depends on a narrow access base.

Package scaffolding

A substantial README and tests are present in both the package and repository. A changelog is absent from the collected files, although the README directs users to changelog information, so this is a minor transparency gap.

Repo bus factor

All 15 recent commits came from one contributor, creating a real concentration risk. Organization ownership provides some handoff capacity, but no second active contributor is shown in this signal.

Repo issue activity

There were no new or merged pull requests in the last month and no new or closed issues, indicating little visible collaboration recently. This is tempered by the repository's active commit and release history.

Repo popularity

The repository has only 2 stars, 0 forks, and 1 watcher. This is weak supporting evidence, but popularity is not decisive and the package has strong release activity.