tsvetkov/telegram_bot

Release historydanger

The latest registry release was in December 2020, with no releases in the last 12 months despite a package age of about seven years. This indicates prolonged release inactivity.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the roughly five-year gap since its last push. This is a strong abandonment concern.

Repo popularitycaution

The repository has 0 stars, 1 fork, and 2 watchers, providing little evidence of a broad community that could compensate for the inactive maintainer.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The tooling supports ordinary packaging while offering no additional evidence of ongoing security maintenance.

Security policycaution

No security policy was found, so there is no documented process for reporting or handling vulnerabilities. This adds a transparency and maintenance concern for a library that handles bot credentials and API traffic.