The release has a declared MIT license, no install-time scripts, and published notes for this version. Its single-maintainer project, three months without commits, missing documentation, and repository-name mismatch make long-term support uncertain.
58%
Total Score
50
100
72
50
Only one registry account, Vicky Rahman, has publish access. The linked project is user-owned rather than organization-owned, so this represents a genuinely thin publishing base.
This version has GitHub release notes, which document its changes. The package has no README, reducing consumer guidance for a library module, while absent tests and changelog are normal packaging practice.
The package has 27 releases in 192 days, showing continued publishing, but the median interval is about 30 minutes, indicating highly bursty release activity rather than a mature cadence.
The repository recorded zero commits and zero active maintainers in the last three months. Although the latest release was recent in the collected history, the lack of follow-up activity raises abandonment risk.
There were no new or closed issues or pull requests in the last month. With no recent commit activity, this provides little evidence of ongoing project engagement.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
vicky-project/telegram-module Version ^1.0 | — | — |
joshbrw/laravel-module-installer Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.