The Unofficial Telegram Bot API PHP SDK
56%
Total Score
caution
Usable with caveats: the linked repository shows no commits in the last three months and does not match the package name.
The repository recorded zero commits and zero active maintainers in the last three months, leaving little evidence of continuing maintenance after the latest release.
The package is 481 days old with only three releases and a median interval of about 167 days, indicating a slow release cadence rather than active development.
The repository has zero stars, forks, and watchers, providing no supporting evidence of community adoption or external oversight.
The repository has no published security policy, reducing transparency about vulnerability reporting and response.
All three workflows were analyzed successfully with no findings or untrusted-code sinks, but all 12 action references are unpinned, leaving workflow dependencies exposed to moving changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/event Version ^2.2 || ^3.0 | — | — |
psr/container Version ^1.1 || ^2.0 | — | — |
guzzlehttp/psr7 Version ^2.5 | — | — |
guzzlehttp/guzzle Version ^7.5.1 | — | — |
illuminate/support Version 9 - 13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.