SecuLens for PHP 1.0.0

SecuLens 1.0.0 aligns the release version across the independent Python, JavaScript/TypeScript and PHP implementations.

• SPDX and CycloneDX SBOM assessment, native OSV vulnerability matching and license policy evaluation.
• Language-native AST review and complexity checks.
• English-default/Japanese interactive wizard and customer Word reports with a cover, severity summary and finding tables.
• Includes the output file safety fixes from the preceding maintenance release.

Language-specific AST rules, supported language versions and SBOM generation adapters are documented in each implementation's README. Findings are assessment evidence, not a guarantee of security or legal compliance.

SecuLens for PHP 0.1.2

Protect CLI report and SBOM output from destination symlink overwrite by replacing generated files from a private temporary location. New report files use restrictive Unix permissions.

Python and TypeScript SBOM generation now has a five-minute timeout. PHP local JSON input/output rejects URL and stream wrapper paths.

Regression tests cover preservation of symlink target files. Dependency audits reported no known vulnerabilities in the installed dependencies at review time; this is not a guarantee of absence of unknown defects.

SecuLens for PHP 0.1.1

Native PHP implementation of SecuLens, with customer-facing Word reports.

• SPDX and CycloneDX SBOM ingestion, optional Syft generation, native OSV matching and SPDX license policy checks.
• PHP AST review rules and code complexity analysis.
• English-default interactive wizard, Japanese support, and customer Word reports with cover, severity summary and finding tables.
• 65 tests passing; CI validates PHP 8.2–8.5. Composer installation and English/Japanese report rendering verified.

Package name: masahiroid/seculens. Packagist registration is pending; see README for installing directly from GitHub.

The included example vulnerability database is synthetic demonstration data.