skeeks/cms-mcp

Usable with caveats: this is a young but actively released package with tests, clear documentation, and a current source repository. Dependence on one contributor, no security policy, and no repository security scanning increase maintenance and transparency risk.

Latest 1.0.4

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is only 66 days old but has 17 releases, including releases within the last 12 months and a median interval of about 1.3 days. This shows strong recent activity, though the short history leaves long-term maturity unproven.

Repo bus factor

One contributor made 100% of the 21 recent commits. Organization backing provides some continuity, but no second active contributor is shown, so maintainer loss remains a real risk.

Repo commit activity

There were 21 commits in the last three months, all from one active maintainer, showing recent maintenance but limited evidence of a broader maintenance base.

Repo popularity

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of community visibility leaves little external evidence of adoption or review.

Repo tooling

Composer is used as a build tool, but no security scanning tools are configured. This is a transparency and maintenance gap rather than evidence that the package is unsafe.