Package Health

vicky-project/telegram-module

The package has a declared MIT license, release notes for this version, and no install-time scripts. Its very short README and absent security policy reduce transparency, while recent work remains concentrated in one contributor.

Latest 1.1.44PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

93

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Dependency profilecaution

The release declares 10 runtime dependencies and no development dependencies. This creates a relatively broad runtime update surface for a focused module, though the dependencies are relevant Laravel and Telegram components.

Repo bus factorcaution

One contributor made all 2 commits in the last 3 months, leaving maintenance dependent on a single active contributor.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, indicating limited recent source activity despite the frequent registry releases.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tool was detected. The missing scanning is a modest transparency and hygiene gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for a package handling authentication and Telegram integrations.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Vicky Rahman

Direct Dependencies

DependencyLast ReleaseScore
laravel/sanctum
Version ^4.3
—
—
laravel/socialite
Version ^5.24
—
—
irazasyed/telegram-bot-sdk
Version ^3.15
—
—
spatie/laravel-activitylog
Version ^4.10
—
—
vicky-project/users-module
Version ^1.0
—
—

Weekly Downloads

Info

Last Published
2 months ago
Created
7 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform