sysbot/tgscraper
The package is licensed, documented, and not deprecated, but its maintenance appears stalled. CI also leaves container images unpinned and has no security policy or security scanning.
53%
Total Score
75
88
75
Health Score Breakdown
The latest release was over two years ago, with no releases in the last 12 months, despite 26 releases since 2021. This is strong evidence of stalled maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap and raising abandonment risk.
The repository uses Composer for builds, but no security scanning tools were detected. This leaves an important maintenance and dependency-checking gap.
No security policy was found in the repository. For a maintained library this reduces transparency about reporting and handling vulnerabilities.
All three workflows were analyzed successfully, with no untrusted checkouts or script injection, but all four action references are unpinned and five high-confidence unpinned container-image findings were reported in pages.yml. This is a real CI supply-chain hygiene concern, though not severe enough alone to make the release unfit.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 sys-001 |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^1.1 | — | — |
symfony/yaml Version ^6.0 | — | — |
symfony/console Version ^6.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
nette/php-generator Version ^4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.