Package Health

pop-wp-schema/pages

This is a healthy, actively maintained release with a strong release history: it has existed for about 5 years, has 150 releases, and received 32 releases in the last 12 months, with a stable non-prerelease version. The repository is active, unarchived, matches the package, and is backed by an organization, while the package includes a license, README, tests, and no install-time lifecycle scripts. The main concerns are that all 14 commits in the last 3 months came from one contributor, the repository has very limited popularity, lacks a security policy and security scanning, and has no changelog; these reduce transparency and resilience but do not outweigh the clear ongoing maintenance and organizational backing.

Latest 19.2.4PackagistPackagist

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

80

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Repo bus factorcaution

One contributor made 100% of the 14 recent commits, creating a low bus factor; organization ownership partly compensates because maintenance can potentially be handed off internally.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month and no open pull requests; this is a limited collaboration signal, but it does not show unresolved maintenance failure.

Repo popularitycaution

The repository has only 2 stars, 0 forks, and 1 watcher, indicating limited community adoption and review; popularity is supporting evidence rather than a decisive health verdict.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are configured; the missing scanning reduces defensive supply-chain hygiene without indicating abandonment.

Security policycaution

The repository has no SECURITY.md or other detected security policy, leaving vulnerability-reporting guidance less transparent despite the README providing an email contact.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Leonardo Losoviz

Direct Dependencies

DependencyLast ReleaseScore
pop-cms-schema/pages-wp
Version ^19.2.4
—
—
pop-wp-schema/customposts
Version ^19.2.4
—
—

Weekly Downloads

Info

Last Published
19 days ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform