artack/recaptcha-enterprise-bundle

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last 3 months. That is a meaningful maintenance and abandonment concern for a package intended for production Symfony applications.

Release historycaution

Four releases arrived within roughly two months, but no newer registry release is shown after December 2025 despite the package being about 11 months old. This suggests maintenance may have slowed.

Security policycaution

No security policy is present in the repository. This is a transparency gap for an integration handling reCAPTCHA and request metadata, although it does not by itself make the release unfit.

Version stabilitycaution

Version 0.2.0 is a stable, non-prerelease release, but it remains before 1.0, so breaking changes between minor versions are more likely.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, injection findings, or excessive permissions, but both of its two action references are unpinned. That leaves avoidable workflow supply-chain exposure.