Package Health/lokeland/shipping-value-objects

lokeland/shipping-value-objects

The package includes a clear README, repository tests, licensing, release notes, and a small dependency surface. Workflow checks also found a high-confidence bot-condition issue and all nine action references are unpinned.

Latest 0.1.1

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by an individual account rather than an organization, so there is no visible organizational maintenance buffer. This makes the stalled activity more concerning, though ownership metadata alone is not a verdict.

Release history

Only two releases were published, with the latest in February 2023 and none in roughly three years and seven months. This strongly increases abandonment risk for a library dependency.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the old latest release, this is strong evidence that maintenance has stalled.

Repo issue activity

There are no new issues or merged pull requests in the last month, and two pull requests remain open. This supports the broader picture of limited recent project activity.

Security policy

No security policy is present. This is a transparency gap for reporting vulnerabilities, though it is less severe for a small value-object library than for security-sensitive software.