The artifact includes an MIT license, a README, and a changelog, but the README is largely template text and provides little usage guidance. Its small dependency footprint does not offset the package's abandonment and limited transparency.
12%
Total Score
100
40
100
Packagist marks the entire package as abandoned, with no replacement named. This is a severe adoption risk because the release is no longer presented as maintained.
This package has only one release, published about five years ago, and none in the last 12 months. That provides strong evidence of abandonment rather than an actively maintained project.
A README and changelog are present, but the README is largely template text and leaves the usage section empty. The missing tests are normal for a published artifact and are not treated as a gap.
The only release is version 0.0.1 and is not a stable major release, which suggests limited maturity. The absence of a prerelease flag offers little compensation because there is no later stable development history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
westacks/telebot Version ^1.12 | — | — |
illuminate/support Version ~7|~8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.