bitphp/framework
The declared license, matching repository, and absence of install-time scripts provide useful transparency. Maintenance is the main concern: the last registry release was about 10 years ago, repository activity has stopped, and security tooling is absent.
39%
Total Score
50
63
75
Health Score Breakdown
The package has only three releases, with the latest published about 10 years ago and none in the last 12 months. This is strong evidence of abandonment risk, with no newer release activity to offset it.
There were no commits and no active maintainers in the last three months. Given the package's already long release gap, this materially increases abandonment risk.
The repository has only 3 stars and 2 forks, providing little evidence of a broad user or contributor base. Popularity is supporting evidence rather than decisive, but it offers no meaningful maintenance buffer here.
Composer is used as a build tool, which is appropriate for this PHP package, but no security scanning tools were detected. The missing scanning is a modest hygiene concern rather than evidence of unsafe behavior by itself.
The repository is not archived, which preserves a path for maintenance, but its last push was about 7 years ago. The unarchived status does not compensate for the prolonged inactivity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Eduardo Becerril Romero |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 gargron/fileupload Version ^1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.