mohamadmurad/telegram-tool-kit

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script. This is a wider installation behavior than a library with no lifecycle hooks and warrants review before allowing automated installs.

Project backingcaution

The repository is owned by an individual rather than an organization, so the single-person registry maintainer base reflects genuinely limited project backing rather than normal organizational publishing hygiene.

Release historycaution

The package has only 3 releases since June 2023, with a median interval of about 588 days, although the latest release was published recently and shows the project is not abandoned outright.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, which is a meaningful maintenance warning for a package intended for ongoing application use.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That weakens automated supply-chain oversight without proving the release is unsafe.