onmotion/yii2-telegram

Release historydanger

The latest release was in October 2018, with no releases during the following 12 months; this is strong evidence that the package is no longer maintained despite its earlier history of 19 releases.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, and its last push was in March 2019, over seven years ago. This reinforces the abandonment risk shown by the release history.

Licensecaution

The manifest declares MIT and the package includes a license file, but the detected license is GPL-3.0, creating an unresolved licensing mismatch for consumers.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not evidence of a security incident.

Security policycaution

The linked repository has no security policy, leaving no documented channel or process for reporting vulnerabilities in a package that handles Telegram bot integrations.