Search by

sumvee / drupalens

sumvee

A lens on your Drupal site's health: security, support status, and hygiene from the command line.

Package info

github.com/sumvee/drupalens

Type:project

pkg:composer/sumvee/drupalens

Security

Advisories: 0

Aikido package health analysis

Transparency log

Statistics

Installs: 2

Dependents: 0

Suggesters: 0

Stars: 0

Open Issues: 0

v0.1.1 2026-10-06 18:37 UTC

Requires

Requires (Dev)

Suggests

None

Provides

None

Conflicts

None

Replaces

None

Apache-2.0 48e180dd99abf80e1b606cf9b7cf98a6abf89914

  • Sumit Vig

securitycliAuditdrupalstatic-analysis

Published on Packagist.org on 2026-10-06 18:37 UTC

This package is auto-updated.

Last update: 2026-10-06 18:39:44 UTC

README

A lens on your Drupal site's health, from the command line. Point it at a Drupal codebase and get one prioritized report: insecure and outdated modules, core/module support status, and project hygiene.

  drupalens audit .                 full report
  drupalens audit . --json          machine-readable findings
  drupalens audit . --fail-on=high  exit non-zero for CI gating
  drupalens audit . --only=security run a single check

Static by default (reads composer.lock, *.info.yml, config), so it runs on any Drupal repo with no database and no bootstrap. Security and outdated-module data is read live from the drupal.org release-history API and cross-checked against Packagist advisories (never bundled stale).

Checks

  security  each drupal.org project vs the live release-history API:
            a newer SECURITY release -> critical (SEC001)
            a newer stable release   -> medium   (UPD001)
  support   end-of-life core majors 7/8/9 (EOL001); contrib projects
            marked unsupported on drupal.org (EOL002)
  hygiene   abandoned Composer packages, with replacement hints (HYG001)
  deprecation  custom code (web/modules/custom, themes, profiles) vs a
               curated map of deprecated Drupal APIs (DEP001): High when a
               symbol is already removed in your core, Medium if only
               deprecated

Run one with --only=security|support|hygiene. Findings carry stable IDs, a severity, and a one-line fix. --fail-on=<severity> (default high) sets the CI exit gate; --cache <dir> reuses drupal.org responses.

Status

Working, pre-1.0. PHP 8.1+, Symfony Console, Apache-2.0. Roadmap: branch-level contrib support, a --live mode for config drift, and a larger deprecation map.

Install (once released)

  composer global require sumvee/drupalens
  # or download drupalens.phar from a GitHub release

Author

Built by Sumit Vig.