The repository has no security policy, and its small public footprint offers little evidence of broader project support. Composer dependencies and release notes for this version provide some traceability.
45%
Total Score
50
50
All 7 releases were published in a burst on March 10, 2024, followed by no releases for about two years and six months. This strongly raises abandonment risk despite the initial release activity.
The package declares no license, contains no license file, and the linked repository has no license file. That creates a material adoption and redistribution problem.
The linked repository is named Vote-Smart-Bot rather than polabrain, and no README package mention was collected. The mismatch leaves uncertainty about whether the repository is the package's actual source.
The repository has 0 stars, 0 forks, and 1 watcher, providing little supporting evidence of external use or review. Popularity is only supporting evidence, so this reinforces rather than determines the maintenance concern.
The linked repository has no security policy. For a Telegram bot package, this reduces transparency around vulnerability reporting and maintenance response.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
losthost/db Version ^3 | — | — |
ramsey/uuid Version 4.7.5 | — | — |
losthost/passg Version v1.1.0 | — | — |
losthost/telle Version dev-master | — | — |
losthost/bot-view Version ^2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.