tg-bot-api/bot-api-base

Release historydanger

The package has made no registry release in over four years and had zero releases in the last 12 months, despite a previously regular release cadence. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the long release gap rather than showing ongoing maintenance between releases.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented. The repository's other maintenance evidence does not compensate for this transparency gap.

Workflow auditcaution

Both analyzed action references are unpinned, which weakens build reproducibility. The audit found no dangerous triggers, untrusted checkouts, script injection, or severity-rated findings, so this is a hygiene caution rather than a severe workflow risk.