vjik/telegram-bot-api

The source is actively updated and includes tests, release notes, and security tooling. One contributor handles all recent commits, and the package-level deprecation makes long-term continuity uncertain.

Latest 0.22

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned, although the listed replacement is the same package and the repository shows recent activity. This remains a material continuity warning.

Repo bus factor

All 10 recent commits came from one contributor, leaving maintenance highly dependent on a single person. Organization backing provides some handoff capacity but does not remove the concentration risk.

Repo package mention

The repository name does not match the package name and its README does not mention this package, so the linkage is less transparent and may indicate a package-to-repository mismatch.

Security policy

No repository security policy was found, which is a modest transparency gap for reporting vulnerabilities.

Version stability

Version 0.22 is not a prerelease, but it remains below major version 1, which indicates some API maturity uncertainty despite stable release status.