gusaln/simple-tg-bot-api

The project has had no commits or releases for over four years, and it remains an alpha release with no security policy. Clear licensing, release notes, a substantial README, and no install-time scripts provide useful transparency, but they do not offset the abandonment risk.

Latest 0.1.0-alpha.2

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only three releases, all concentrated within about five hours, and none in the last 12 months; the latest release is over four years old. This strongly indicates abandonment risk.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, consistent with the package having received no updates for over four years.

Project backing

The package and repository are owned by the same individual account. That is coherent ownership, but it also indicates a single-person project rather than organizational backing.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of external adoption or review.

Repo tooling

Composer build tooling is present, but no security scanning tooling was detected. This is a modest repository hygiene gap, especially for an unmaintained package.