m1roff/yii2-telegram-notifications

Release historydanger

The latest release was about 4 years ago, with no releases in the last 12 months; this is strong evidence of stalled maintenance for a dependency.

Package file treecaution

The artifact and repository each contain only four files, including the implementation and README; this keeps the project understandable but leaves little evidence of maturity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and increasing abandonment risk.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling is present. That is a hygiene gap, though it is not severe on its own for this small package.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and maintenance expectations.