The class Symplify\ComposerJsonManipulator\ValueObject\ComposerJson is part of the public API of Rector because it is required by the ComposerRectorInterface. I think it should not be prefixed.