Unfit to use: this package is deprecated and its source repository is archived. The last release was over a year ago with no recent commit activity, and Packagist names a maintained replacement package.
18%
Total Score
50
100
63
83
Packagist marks the entire package as abandoned and points to laravel-notification-channels/telegram as its replacement. This is a severe adoption risk because future maintenance is explicitly redirected elsewhere.
There were no commits and no active maintainers in the last three months. Combined with the archived repository and package abandonment, this is strong evidence that maintenance has stopped.
The linked repository is archived, so it is no longer an actively maintained project even though it was last pushed in March 2025. This strongly increases the risk of depending on an unmaintained package.
The package has 12 releases, but none were published in the last 12 months; the latest release was in February 2025. The earlier release history shows prior activity but does not offset the current lapse.
Composer is used as the build tool, which is appropriate for a Packagist PHP package. No security scanning is configured, a transparency gap, but the archived and abandoned status is the more consequential concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version >=10.0 | — | — |
irazasyed/telegram-bot-sdk Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.