pop-wp-schema/users

This is a generally healthy, actively maintained release: the package is over five years old, has 151 releases including 33 in the last 12 months, was published recently, is stable rather than prerelease, and is not deprecated or archived. It has a clear README, tests in both the artifact and repository, a license file, Composer-based build tooling, and an organization-owned repository that matches the package. The main concerns are concentrated maintenance responsibility—one contributor made all 15 commits in the last three months—and limited security and project visibility, with no security scanning, no security policy, very low repository popularity, and no changelog detected. These are meaningful cautionary factors but do not outweigh the strong release and maintenance history.

Latest 19.2.4

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made all 15 commits in the last three months, creating a concentrated bus factor. Organization backing provides some potential handoff capacity, but no second active contributor is shown.

Repo issue activity

There were no new or merged pull requests and no issue activity in the last month, although there are zero open pull requests. This provides little evidence of broader community activity.

Repo popularity

The repository has only 1 star, 0 forks, and 1 watcher. Low popularity is supporting caution about external adoption and review, but it is not by itself evidence of abandonment.

Repo tooling

Composer build tooling is present, supporting reproducible project management, but no security-scanning tools are configured.

Security policy

No repository security policy was found, leaving vulnerability-reporting guidance less formal despite the README containing an email-based security contact.