The last release was over ten years ago, with no commits in the past three months. The 32-character README and absent security policy provide little maintenance or consumer guidance.
8%
Total Score
0
20
50
Packagist marks the entire package as abandoned, with no replacement named. This is a direct warning against taking a new dependency on it.
Only two releases exist, and the latest was published over ten years ago; there have been no releases in the past 12 months. The long release interval reinforces abandonment risk.
The repository recorded zero commits and zero active maintainers in the past three months. The archived state and old latest release make this lack of activity significant rather than temporary.
The linked BitWeb repository is archived and was last pushed in December 2015, indicating the source is no longer maintained.
The manifest declares a proprietary license and no license file was found in the package or repository. That creates a material legal barrier for an open-source dependency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
bitweb/mail Version ~1.1 | — | — |
zendframework/zend-mvc Version ~2.2 | — | — |
zendframework/zend-modulemanager Version ~2.2 | — | — |
zendframework/zend-servicemanager Version ~2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.