Package Health/lucadevelop/telegram-entities-decoder

lucadevelop/telegram-entities-decoder

The package is small and easy to inspect, with a narrow dependency set, clear documentation, and a matching source repository. Its single-maintainer setup and lack of tests or a security policy leave less independent assurance.

Latest v1.4

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by a user account rather than an organization, and the registry namespace matches that owner. This is consistent with a small independently maintained package, but offers limited organizational continuity.

Release history

Only 5 releases have been published across about 4 years and 8 months, with a median interval of about 352 days; the latest release provides some evidence of ongoing maintenance but the cadence is sparse.

Repo commit activity

There were no commits and no active maintainers in the last three months, which weakens evidence of ongoing maintenance and increases the risk that issues may remain unaddressed.

Repo tooling

Composer is used for the build, but no security scanning tools are configured. The missing scanning is a modest transparency and maintenance gap rather than a severe risk by itself.

Security policy

The repository has no security policy, leaving no documented path for reporting vulnerabilities or describing security handling.