2dotstwice/value-objects

Release historydanger

Only two releases were published, both in February 2018, with no releases in roughly eight years. This is strong evidence that maintenance has stopped, although the package is not marked deprecated.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, and its last push was in March 2018. That sustained inactivity creates substantial abandonment risk.

Repo issue activitycaution

There has been no issue or pull-request activity in the last month, with one issue still open. This supports the broader inactivity concern but is weaker evidence by itself.

Repo toolingcaution

Composer and Phing provide build tooling, and the repository has no security scanning tools. The build setup is a positive, while the missing scanning is a modest assurance gap.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap, though the package has no reported security finding here.