The project has a minimal footprint, with no tests or security automation to support ongoing changes. Its MIT licensing and stable 1.0.1 release are positives, but consumer documentation is mostly a template.
57%
Total Score
50
100
71
75
A README is present, but its installation and usage sections remain generic placeholders. The absence of tests and a changelog is normal for a published artifact and is not treated as a gap.
Only two releases exist, with none in the last 12 months; the latest release was about 19 months ago. This indicates a small and currently inactive release history.
There were no commits and no active maintainers in the three months measured. Combined with the absence of recent releases, this is evidence of weak current maintenance.
The repository name does not match the package name and its README does not mention the package. That weakens confidence that the linked source repository is specifically intended for this release.
Composer build tooling is present, but no security scanning tools were detected. This leaves less automated support for catching dependency or code problems.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
weline/framework Version ^1.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.