The MIT license, concise README, and matching organization-owned repository provide basic transparency. The package’s small footprint and lack of install scripts reduce operational exposure but do not offset its maintenance risk.
15%
Total Score
50
63
75
Packagist marks the entire package as abandoned and names polymorphic-field_type as a replacement. Package-level abandonment is a severe adoption risk even though no specific release was withdrawn.
The latest release was published in October 2016, with no releases in the last 12 months despite the package being nearly 10 years old. This strongly indicates the release line is no longer maintained.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with a long-stalled project. This leaves little evidence of ongoing maintenance capacity.
The repository has zero stars, six forks, and two watchers, providing little supporting evidence of broad community attention. Popularity is only supporting evidence and does not determine health by itself.
Composer is used as a build tool, but no security-scanning tooling is present. The missing scanning is a minor hygiene concern rather than a standalone adoption blocker.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.