The goal is to allow Java web developers to create workflow-like websites, moving away from the traditional page-based system to a website represented by states (screens) and transitions (links, forms...) and using AJAX to process the requests.
There are no reported vulnerabilities