Package Health/mirkhamidov/yii2-bot-telegram

mirkhamidov/yii2-bot-telegram

The package is tiny, has no tests, and provides no security scanning or policy. Its source has seen no commits in over two years, leaving maintenance and compatibility risk for a dependency.

Latest 0.1.1

Packagist

40%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases exist, with no release in the last 12 months and a median interval of about 4 years and 10 months. This indicates very limited release activity and raises abandonment risk.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months; its latest push was in January 2024, more than two years before collection. That is strong evidence of inactive maintenance.

Package file tree

The complete package contains only README.md, TelegramBot.php, and composer.json. Such a small library can be legitimate, but the absence of additional project structure provides little evidence of mature maintenance.

Repo popularity

The repository has 0 stars and 0 forks, with only 1 watcher. Popularity is not required for a healthy package, but these counters provide no supporting evidence of community adoption or review.

Repo tooling

Composer is used as the build tool, but the repository has no security scanning tools. For a dependency distributed through a registry, that is a modest transparency and maintenance gap.