Wrapper for VK api, which makes it more convenient to work with VK bots
42%
Total Score
unhealthy
Risky: no release since August 2022 and the package says it is not ready to use.
The package has had no release in nearly four years; all 19 releases were concentrated within minutes on August 10, 2022, which strongly suggests abandonment.
Five packages are declared as runtime dependencies, including PHPUnit and Orchestra Testbench, while no development dependencies are declared. That is an unusual and potentially burdensome dependency setup for consumers.
The published README explicitly says the package is under development and not ready to use. Missing tests and a changelog are normal for a published artifact, so they do not add separate weight.
The repository has zero stars and forks and only one watcher, providing little evidence of external use or community support. Popularity is supporting evidence rather than a verdict by itself.
The linked repository has no security policy. This is a transparency and maintenance gap, especially for a package that handles bot API credentials and requests.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpunit/phpunit Version ^9.5.10 | — | — |
illuminate/console Version ^9.0 | — | — |
illuminate/support Version ^9.0 | — | — |
illuminate/database Version ^9.0 | — | — |
orchestra/testbench Version 7.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.