moonspot/value-objects

This is a healthy, actively maintained stable release with a clear BSD-3-Clause license, tests in both the artifact and repository, recent release activity, and an active non-archived source repository. Maintenance risk is limited: only one registry publisher is listed, but the repository shows two active contributors and balanced recent commit activity. The main gaps are the absence of a security policy and explicit top-level GitHub Actions permissions, plus no repository security-scanning tool; these are transparency and workflow-hardening concerns rather than evidence that the package is unsafe to depend on.

Latest v2.4.1

Packagist

86%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

One registry account has publish access, which creates some publishing concentration, but this is mitigated by the repository's two active contributors and recent activity.

Project backing

The repository is owned by an individual user rather than an organization, so the small maintainer and contributor base should be considered when assessing continuity.

Repo popularity

The repository has zero stars and forks and only two watchers, indicating limited external adoption; this is supporting caution rather than a health verdict because other maintenance evidence is strong.

Repo tooling

Composer build tooling is present, but no security-scanning tool is configured; the latter is a hygiene gap, not a standalone severe risk.

Security policy

No repository security policy was found, reducing transparency around vulnerability reporting and response procedures.