Usable with caveats: the package is licensed, tested, and backed by a matching organization repository, but it has had no release or commit activity for about three years. Depend on it only if its stable API meets your needs and you can accept limited evidence of ongoing maintenance.
58%
Total Score
67
50
81
80
The package has four runtime dependencies, including the PHP platform and related delivery libraries. This is a moderate dependency surface that adds some maintenance exposure but is not excessive for an integration package.
The package has four releases since 2018, but none in the last 12 months and the latest release was about three years ago. This materially raises maintenance and abandonment concerns.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the roughly three-year gap since the last release. That is a meaningful sign of inactive maintenance.
There are no open issues and one open pull request, but no issues or pull requests were merged in the last month. This offers little evidence of active maintenance.
The repository has no stars or forks and only two watchers. Popularity is supporting evidence rather than a verdict, but these counters provide little additional confidence in project maturity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
klev-o/telegram-bot-api Version ^1.9 | — | — |
horat1us/environment-config Version ^1.5 | — | — |
wearesho-team/message-delivery Version ^1.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.