shanginn/telegram-bot-api-framework

Dangerous workflowscaution

One workflow uses an untrusted checkout, which adds CI supply-chain exposure even though no pull_request_target or script-injection workflows were detected.

Repo bus factorcaution

All 4 recent commits came from one contributor, leaving continuity dependent on a single active developer. Organization backing provides some handoff potential, but no second active contributor is shown.

Repo issue activitycaution

There are 7 open pull requests, with 1 new pull request in the last month but none merged during that period; this suggests active interest but limited demonstrated throughput.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package, creating uncertainty about whether it is the intended source repository rather than a related monorepo component.

Repo popularitycaution

The repository has only 6 stars, 0 forks, and 1 watcher, so community adoption and external visibility are limited.