ytake/valueobjects

Strong tests, a clear MIT license, and a repository that matches the package support adoption. Missing security scanning and two unpinned workflow actions reduce transparency and build reproducibility.

Latest 2.1.0

Packagist

55%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has four releases over roughly nine years, with no releases in the last six years and a median interval of about 437 days. This is a substantial maintenance concern for a library dependency.

Repo commit activity

There were no commits and no active maintainers in the last three months, while the repository was last pushed about four years ago. This strongly increases abandonment risk.

Repo issue activity

There has been no issue or pull request activity in the last month, with one open issue and two open pull requests. This is consistent with a largely inactive project.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. For a reusable PHP library, the missing security automation is a modest transparency gap.

Security policy

The repository has no security policy. This does not establish a vulnerability, but it leaves vulnerability reporting and response expectations undocumented.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Nicolò Pignatelli

Yuuki Takezawa

Direct Dependencies

Dependency	Last Release	Score
ramsey/uuid Version ^4.0 \|\| ^3.0	—	—
moneyphp/money Version ^3.1	—	—
league/geotools Version ^0.8	—	—
marc-mabe/php-enum Version ^4.0 \|\| ^3.0	—	—
laminas/laminas-validator Version ^2.0	—	—