Its README, tests, MIT license, and two runtime dependencies provide a clear integration path. Only one registry maintainer and no repository security scanning or policy reduce confidence; pin the version while the project matures.
61%
Total Score
63
100
83
83
The registry lists one maintainer, Captchala. The organization-backed repository makes a short registry publishing list less concerning, but it still provides limited evidence of independent maintenance capacity.
The package is only 100 days old and all seven releases arrived within that period, with a median interval of about 33 minutes. This shows active initial publishing but not yet a proven long-term cadence.
The repository recorded zero commits and zero active maintainers during the last three months. For a package released only about 100 days ago, this is a meaningful warning about maintenance continuity.
There is one open issue, with one new issue and no closures in the last month. This is limited evidence, but it suggests at least one unresolved maintenance item.
The repository has 2 stars, 1 fork, and no watchers. Low popularity is only supporting evidence, but it means there is little visible community adoption to compensate for the thin maintenance history.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.