18y/think-jwt-captcha

Release historydanger

The package has had only one release, published in January 2021, with no releases in the last 12 months. That long period without a new release is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap and indicating no visible ongoing maintenance.

Repo popularitycaution

The repository has 1 star and 1 fork, providing little external validation or community support. Low popularity is only supporting evidence, but it adds to the risk when combined with the lack of recent maintenance.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are configured. The small package is still easy to inspect, but automated detection of dependency or code problems is absent.

Security policycaution

The repository has no security policy, leaving users without a documented channel or process for reporting security issues. This is a transparency and maintenance weakness, though it does not by itself make the package unfit.