Winglet Core Framework
45%
Total Score
100
50
100
The package declares a proprietary license and includes no license file, which creates a significant legal and redistribution concern for an open-source dependency.
The published artifact has no readme, which is a real integration gap for a framework package. Its lack of tests and changelog is normal for a published artifact and is not treated as a deficiency.
This package is only 204 days old but has 41 releases, including 40 in the last 12 months and a median interval of about 23 hours. That shows activity, but the very rapid cadence provides limited evidence of maturity.
Version v0.12.2 is not a stable major release, although it is not marked as a prerelease. The 0.x versioning increases the chance of breaking changes for consumers.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
psr/cache Version ^3.0 | — | — |
doctrine/orm Version ^3.6 | — | — |
psr/container Version ^2.0 | — | — |
symfony/cache Version ^7.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.