noplanman/telegram-bot-manager
The release has a clear README, MIT licensing, tests in the repository, and a security policy. Its dependency set is modest, but the project lacks security scanning and its publishing workflow uses three unpinned actions.
18%
Total Score
50
100
58
83
Health Score Breakdown
Packagist marks the entire package as abandoned, with no distinct replacement package identified. This is a severe adoption and maintenance warning for a new dependency.
The package has 24 releases over roughly 10 years, but none in the last three years despite a prior median interval of about 43 days. The long release gap indicates likely abandonment.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the multi-year release gap. This materially raises the risk that defects will remain unaddressed.
The linked repository is not archived, which is a compensating sign, but it was last pushed in May 2023 and therefore does not offset the prolonged inactivity.
The only workflow was fully analyzed, uses read-only permissions, and has no high-confidence audit findings or untrusted checkout or script-injection paths. However, all three action references are unpinned, leaving a supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Armando Lüscher |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^1.0|^2.0|^3.0 | — | — |
longman/ip-tools Version ^1.2 | — | — |
longman/telegram-bot Version ^0.81 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.