alexsisukin/php-telegram-bot-core
Its MIT license, complete package structure, tests, and changelog improve transparency. The repository does not mention the package in its README and has no security policy, leaving adoption and maintenance concerns.
40%
Total Score
64
75
Health Score Breakdown
This package has only one release, published about 8 years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a library dependency.
The repository name matches the package, but the README does not mention the package name. That leaves some uncertainty about the repository's relationship to the published package.
The repository has 0 stars, 0 forks, and 1 watcher, providing no meaningful supporting evidence of active use or community oversight.
The repository is not archived, which is a small positive, but its last push was about 8 years ago and does not offset the stale release history.
The repository has no security policy. This weakens vulnerability-reporting transparency, although it is less serious than the package's long inactivity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Avtandil Kikabidze aka LONGMAN |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 monolog/monolog Version ^1.22 | — | — |
guzzlehttp/guzzle Version ^6.2 | — | — |
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.