baoziyoo/hyperf-captcha

The package includes a clear MIT license, a usable README, repository tests, and no install-time scripts. Its workflows use unpinned actions and include one high-confidence archived-action finding, while security scanning and a security policy are absent.

Latest v1.0.2

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were zero commits and zero active maintainers during the last three months. Combined with the last push being about three years ago, this is substantial abandonment risk.

Project backing

The repository is owned by an individual account rather than an organization. That makes the lack of recent activity more consequential because no organizational maintenance capacity is shown.

Release history

The package has only three releases and none in the last 12 months; its latest release was about three years ago. This indicates materially slowed maintenance for a dependency.

Repo issue activity

There are no open issues or pull requests and no recent activity. A clean issue tracker can be positive, but here it does not compensate for the absence of releases and commits.

Repo popularity

The repository has no stars or forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counters provide little evidence of a broad support community.