mpociot/botman
The source repository is not archived and includes tests, release notes, and a clear MIT license. However, its recent commit and issue activity is absent, while the workflow leaves all six actions unpinned and has no security policy.
38%
Total Score
50
72
67
Health Score Breakdown
Packagist marks the entire package as abandoned, not merely this release, and provides no replacement package. That makes continued dependency adoption a substantial maintenance risk.
The package has 56 releases since October 2016 but none in the last 12 months; its latest registry release was in September 2020. This is strong evidence of an abandoned published release line.
The repository recorded zero commits and zero active maintainers over the last three months, indicating current maintenance has effectively stopped despite the non-archived repository.
There were no new or closed issues and no pull-request activity in the measured month, leaving little evidence of active issue handling.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap for a dependency with no recent release activity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Marcel Pociot |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 opis/closure Version ^2.3 || ^3.0 | — | — |
react/socket Version ~1.0 | — | — |
psr/container Version ^1.0 | — | — |
mpociot/pipeline Version ^1.0.2 | — | — |
spatie/macroable Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.