It includes tests, a substantial README, and a recent stable release, with no install-time scripts. Limited security process and very small repository activity leave less evidence for long-term support.
60%
Total Score
50
86
75
The manifest declares MIT, but the artifact also contains an Apache-2.0 license file, so the release's licensing signals disagree and consumers should clarify which terms apply.
Only one registry publishing maintainer is listed. Because the source owner is a user rather than an organization, there is no provided backing signal to offset that concentration.
One contributor made all commits in the last three months, leaving maintenance highly concentrated and increasing continuity risk.
Only one commit was recorded in the last three months. The recent push shows some activity, but the small volume provides limited evidence of sustained maintenance.
The repository name does not match the package name, and the README mention could not be confirmed. This creates some uncertainty that the linked repository is the package's authoritative source.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
weline/framework Version @dev | — | — |
weline/module-admin Version @dev | — | — |
weline/module-theme Version @dev | — | — |
weline/module-backend Version @dev | — | — |
weline/module-system-config Version @dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.