koot-labs/telegram-bot-dialogs

Release historycaution

The package has 38 releases since July 2022, but none in the last 12 months; the latest release was about 15 months ago. This is a meaningful maintenance concern despite the historically active release record.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, indicating no recent development activity. The repository was pushed more recently overall, but that does not offset the current inactivity.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, partially offset by the repository's Dependabot and Psalm tooling.

Workflow auditcaution

All four workflows were analyzed successfully, with no untrusted checkouts or script injection, but the audit found a high-confidence unpinned container image. This is a supply-chain hygiene weakness, though not a standalone abandonment signal.