The package includes tests, a readable README, and no install-time scripts. Its small dependency surface and recent repository update provide some reassurance, but ongoing maintenance capacity remains limited.
62%
Total Score
50
100
86
83
The repository owner is an individual user rather than an organization, so the single-maintainer and single-contributor risks are not visibly compensated by organizational backing.
The package has only two releases over roughly three and a half years, with one release in the last 12 months and a median interval of about three years and four months; this is a meaningful maintenance-cadence concern.
All recent commits came from one contributor, so maintenance is highly concentrated and the project has little demonstrated redundancy.
There was one commit in the last three months from one active maintainer, showing recent activity but only limited evidence of sustained maintenance.
The repository name does not match the package name, and the README could not be confirmed to mention the package, creating some uncertainty that the linked repository is specifically for this release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
weline/framework Version @dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.