tueen/telegram

Release historycaution

This is the package's first release, published today, so there is no release track record or demonstrated maintenance cadence yet.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.

Version stabilitycaution

The assessed version is an alpha prerelease, which signals changing APIs and a less mature dependency surface.

Workflow auditcaution

All 8 analyzed action references are unpinned, reducing build reproducibility; the high-confidence template-injection finding is a workflow hygiene concern, while no untrusted checkout or script-injection sink was observed.