hamasakibrain/telegram

Release historydanger

This is the package's only release, published 747 days ago, with no releases in the last 12 months. That strongly limits evidence of ongoing maintenance.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last 3 months, consistent with a project that may no longer be maintained.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this provides no external adoption signal to offset the inactive release history.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. That is a meaningful transparency and maintenance gap for a dependency project.

Workflow auditcaution

All five workflows were analyzed successfully and have no dangerous triggers, untrusted checkouts, injection findings, or write-level top permissions. However, all 16 action references are unpinned, leaving builds exposed to upstream action changes.