pascualmg/ddd-finitions

Tests, a README, a small dependency surface, and no install scripts make the package straightforward to inspect and consume. Its single-user ownership and lack of security policy add modest transparency concerns.

Latest 1.0.2

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is about 5 years and 7 months old, has only 2 releases, and has had no release in the last 12 months. This is strong evidence of stalled maintenance, though it is not registry-deprecated.

Repo issue activity

There are no open issues or pull requests and no recorded activity in the last month. This is consistent with a quiet project, although zero open work is not inherently unhealthy.

Repo popularity

The repository has 1 star, 0 forks, and 1 watcher. This is limited supporting evidence and suggests little community redundancy, but popularity alone is not decisive.

Repo tooling

The project uses Make and Composer, showing basic build tooling, but no security-scanning tools were detected. This is a modest hygiene gap rather than evidence of unsafe code.

Security policy

The linked repository has no security policy. For a small learning-oriented library this is a transparency gap, but it is less serious than missing maintenance evidence.