zhuchunshu/telegram-bot-sdk
The repository has tests, a matching README, and a clear BSD-3-Clause license. It lacks a security policy, and all five workflow actions are unpinned, weakening maintenance and build transparency.
40%
Total Score
0
72
67
Health Score Breakdown
The package has had no release in over five years, despite 21 total releases, which is strong evidence of abandonment for a maintained SDK.
There were zero commits and zero active maintainers in the last three months, consistent with the multi-year release gap and indicating no current maintenance capacity.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this provides no external adoption signal to offset the inactivity.
The repository uses Composer, but it has no security scanning tools. This is a modest transparency and maintenance weakness rather than a standalone adoption blocker.
The repository is not archived, but its last push was in January 2021; the non-archived status does not compensate for the prolonged inactivity shown elsewhere.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Syed Irfaq R. |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 league/event Version ^2.1 | — | — |
guzzlehttp/psr7 Version ^1.3 | — | — |
guzzlehttp/guzzle Version ^6.3 || ^7.0.1 | — | — |
illuminate/support Version ^5.5 || ^6.0 || ^7.0 || ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.