lumensistemas/lens

The MIT license, repository tests, release notes, and pinned workflow actions provide useful transparency. The project is small and has limited security-process evidence, so pin this version while watching for renewed maintenance.

Latest 1.0.4

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is young, with 5 releases over 151 days and a rapid initial cadence, but the latest release was about four months before collection. That pause is a maintenance concern for a tooling package.

Repo commit activity

No commits and no active maintainers were observed in the last three months. Combined with the release pause, this indicates a thin or currently inactive maintenance pattern.

Repo popularity

The repository has zero stars, forks, and watchers. This provides little external validation, but popularity is supporting evidence only and does not outweigh the maintenance and transparency signals.

Repo tooling

Composer is used for the build, but no security-scanning tooling is reported. The missing scanning is a modest process gap rather than evidence of unsafe code.

Security policy

The repository has no security policy. For a code-quality tool that can execute project and build commands, this weakens vulnerability-reporting transparency.