Telegram Bot Base Framework (project skeleton).
62%
Total Score
caution
A single-maintainer project has only two recent commits, while its repository does not identify or mention this package and all workflow actions are unpinned.
The package has 11 runtime dependencies, including framework, queue, database, and cache components. This is a substantial dependency surface but is consistent with the described framework scope.
The repository is owned by a personal user account rather than an organization, so there is no organizational backing to offset the single-contributor concentration.
One contributor made all two recent commits, giving the project a complete single-contributor concentration and increasing abandonment or handoff risk.
Only two commits were recorded in the last three months, indicating limited recent implementation activity despite the package's frequent release history.
The repository name does not match the package name and its README does not mention the package, so the repository may not clearly belong to this release.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
predis/predis Version ^3.4 | — | — |
monolog/monolog Version ^3.9 | — | — |
illuminate/cache Version ^10.49 | — | — |
illuminate/redis Version ^10.49 | — | — |
vlucas/phpdotenv Version ^5.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.