cyrille-hugues/alyosha

Release historydanger

The package has made only two releases, with none in the last nine years; its latest release was in November 2017. This is strong evidence of abandonment risk for a framework dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since 2017.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are present. This is a modest transparency and maintenance gap, though it does not by itself show a defect.

Security policycaution

The repository has no published security policy, leaving no documented process for reporting or handling vulnerabilities in a package that provides a bot framework.