laravel-notification-channels/telegram

This is a healthy, mature release with a long release history dating to 2016, a stable 8.0.0 version, recent publication, and no registry deprecation. The linked organization-owned repository is active, matches the package, has substantial documentation, repository tests, regular recent commits, merged pull requests, dependency scanning, and no detected dangerous workflow patterns. The main reservations are the small active contributor base, absence of a repository security policy, and incomplete GitHub Actions permission declarations, but these do not outweigh the strong maintenance and transparency evidence.

Latest 8.0.0Packagist

Health Score Breakdown

Lifecycle scriptscaution

A post-autoload-dump install lifecycle script is present. This adds some installation complexity, but the signal alone does not indicate an unsafe or unusual workflow.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance less transparent. This is a genuine hygiene gap, but it is not evidence of abandonment or an unsafe release by itself.

Token permissionscaution

Five of six workflows lack top-level token permission declarations, and one workflow declares write access. Explicit least-privilege declarations would improve CI security hygiene, though the separate dangerous-workflow analysis found no exploit-prone patterns.

View all 20 health checks

Vulnerabilities

We didn't find any vulnerabilities for this package.

Maintainers

Irfaq Syed

Direct Dependencies

Dependency	Last Release	Score
guzzlehttp/guzzle Version ^7.8 || ^8.0	—	—
illuminate/support Version ^12.0 || ^13.0	—	—
illuminate/contracts Version ^12.0 || ^13.0	—	—
illuminate/notifications Version ^12.0 || ^13.0	—	—