Package Health/boshurik/telegram-bot-bundle

boshurik/telegram-bot-bundle

Usable with caveats: this is a mature, licensed Symfony bundle with a current stable release, tests, release notes, and a maintained source repository. Recent commit activity is quiet, and the repository lacks a security policy and explicit workflow token permissions.

Latest 6.0.2

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed for over 10 years with 24 releases, but only one release in the last 12 months indicates a relatively slow cadence.

Repo commit activity

The repository had no commits from active maintainers in the last 3 months, indicating quiet ongoing development. The recent release and repository push partly offset this concern but do not show sustained activity.

Repo issue activity

There are no open issues or pull requests, and no recent issue or pull-request activity. This is not inherently negative, but it provides little evidence of active community maintenance.

Security policy

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Token permissions

All three workflows omit top-level token permissions. No workflow requests top-level write access, but explicit least-privilege declarations would provide stronger supply-chain transparency.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Alexander Borisov

Community

Direct Dependencies

Dependency	Last Release	Score
symfony/console Version ^5.4 \|\| ^6.0 \|\| ^7.0 \|\| ^8.0	—	—
telegram-bot/api Version ^2.3.14	—	—
symfony/event-dispatcher Version ^5.4 \|\| ^6.0 \|\| ^7.0 \|\| ^8.0	—	—
symfony/framework-bundle Version ^5.4 \|\| ^6.0 \|\| ^7.0 \|\| ^8.0	—	—