It has a clear MIT license, a README, repository tests, and an organization-backed source project. The workflow uses read-only job permissions, but all seven action references are unpinned.
61%
Total Score
67
100
78
50
The registry has one publishing maintainer. That is a modest resilience concern, although the organization-backed repository provides some compensating project context.
This is the only release, published about 297 days ago, so there is little release history to demonstrate sustained maintenance.
There were no commits and no active maintainers in the last three months, which is a meaningful maintenance warning for a package with only one release.
The repository name does not match the package name and its README does not mention the package, so the link may not clearly establish that this repository belongs to the published package.
The repository has one star and no forks or watchers. This gives little evidence of broad adoption, but popularity is supporting evidence rather than a health verdict.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
crustum/notification Version ^1.0 | — | — |
longman/telegram-bot Version ^0.83 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.