uma/ocular
Testing is present, the release is stable, and installation runs no lifecycle scripts. The small project has limited security and workflow hardening, so future maintenance deserves attention.
62%
Total Score
50
100
92
75
Health Score Breakdown
There were no commits and no active maintainers in the last three months. Although the recent release shows some activity, the current pause lowers confidence in ongoing maintenance.
Composer is used as the build tool, but no security-scanning tool was detected. The missing scanning automation is a real hygiene gap for a dependency package.
The repository has no security policy. That makes vulnerability reporting and project response expectations less transparent.
The sole workflow was fully analyzed with no high-confidence audit findings or dangerous triggers, but both action references are unpinned. The absent top-level permissions block is acceptable here because the workflow has no write permissions.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 jms/serializer Version ^3.30 | — | — |
symfony/console Version ^7.0 || ^8.0 | — | — |
symfony/process Version ^7.0 || ^8.0 | — | — |
guzzlehttp/guzzle Version ^7.8 | — | — |
phpoption/phpoption Version ^1.9 | — | — |
Weekly Downloads
Info
- Last Published
- 7 months ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.