superbition/polyel

The package has a clear Apache-2.0 license, release notes, and a repository that matches its name. Its small footprint and lack of automated security scanning reduce confidence, while organization backing provides some context.

Latest v0.5.0

Packagist

43%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was about five years ago, with no releases in the last 12 months. That strongly raises abandonment risk for a package intended to seed applications.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the stale release history, this is strong evidence that maintenance has stopped.

Repo issue activity

There are no open issues or pull requests and no recent issue or pull request activity. This is consistent with a quiet project, but is weaker abandonment evidence than the absent commits and releases.

Repo popularity

The repository has 5 stars and no forks, providing little community evidence or outside maintenance capacity. Popularity is supporting evidence only, but this small footprint adds to the adoption risk.

Repo tooling

Composer build tooling is present, but no security-scanning tools are configured. That is a modest repository hygiene gap rather than a severe supply-chain concern.