Package Health/cslant/laravel-telegram-git-notifier

cslant/laravel-telegram-git-notifier

Documentation, tests, and release notes make integration easier. The release has had no registry update in over two years, and recent repository activity is quiet; workflow hygiene also needs attention.

Latest v1.2.0

Packagist

62%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published on May 23, 2024, with no releases in the last 12 months. That long gap materially raises maintenance and abandonment concerns.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months. This indicates no recent development activity despite the repository not being archived.

Repo issue activity

There were no new or closed issues or pull requests in the last month, leaving open work largely unattended. This supports the concern about limited current maintenance.

Security policy

The repository has no published security policy. This is a transparency gap for a package that handles webhook and Telegram integrations, though it is not evidence of a security defect.

Workflow audit

All five workflows were analyzed, but all 11 action references are unpinned; the audit also found high-confidence bot-condition and unpinned-container-image issues. The pull_request_target workflow has no untrusted checkout or script-injection sink, so these remain workflow-hygiene concerns rather than a severe dependency risk.