SDK for work with Telegram Bot API
62%
Total Score
caution
Usable with caveats: recent releases exist, but maintenance activity and security practices are limited.
Registry publishing access is held by one person. Because the repository is user-owned rather than organization-backed, this indicates a thin publishing base and limited redundancy.
The registry namespace and repository owner match, but both are tied to an individual account rather than an organization, offering limited visible backing.
The package has 12 releases over about 2 years and 2 releases in the last 12 months, showing ongoing publication but a modest recent cadence.
The repository recorded zero commits and zero active maintainers in the last 3 months. Although a release was published recently, the lack of recent commit activity raises maintenance risk.
The repository has 1 star and no forks, indicating very limited adoption evidence. Popularity is only supporting evidence, so this modestly reduces confidence rather than determining the verdict.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^2.0 | — | — |
darkdarin/serializer Version ^1.4 | — | — |
php-http/multipart-stream-builder Version ^1.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.