telegram-bot/api

Release historycaution

The package has 48 releases and historically released about every 19 days, but its latest release was about three years ago and there were no releases in the last 12 months. This is a substantial maintenance concern despite the strong historical cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The repository was pushed more recently than the package release, but the current absence of commit activity still raises abandonment risk.

Security policycaution

No repository security policy was found. This is a transparency and vulnerability-reporting gap, although the available Psalm tooling provides some compensating security practice.

Workflow auditcaution

All four workflows were analyzed without trigger or injection findings, and none grants top-level write access. However, all 11 action references are unpinned, leaving build automation exposed to upstream action changes.