shanginn/telegram-bot-api-bindings
Low level type-safe PHP bindings for the Telegram Bot API
12%
Total Score
critical
Unfit to use: the package is deprecated and its source repository is archived.
Health Score Breakdown
Packagist marks the entire package as abandoned and names phenogram/bindings as a replacement. Package-level abandonment is a severe dependency risk even though the assessed release itself is not separately withdrawn.
Only three releases exist, and there have been no releases in the last 12 months; the latest release was on July 8, 2024. This supports the abandonment concern rather than showing an actively maintained project.
The repository recorded no commits and no active maintainers in the last three months. Combined with the archived state, this indicates maintenance has stopped.
The linked repository is archived, with its last push on September 1, 2024, so it is no longer an active maintenance source. This strongly increases abandonment and update risk.
The repository name does not match the package name and its README does not mention this package. That leaves some uncertainty about package-to-source alignment, although the repository’s Telegram bindings content is related.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Nikolai Shangin |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 react/promise Version ^3 | — | — |
symfony/validator Version ^6.3 | — | — |
symfony/serializer Version ^6.3 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.