crabstudio/recaptcha

Release historycaution

The package has 20 releases since 2015, but none in the last 12 months; the latest release was published on January 28, 2025. This long pause lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last 3 months. Combined with no registry releases in the last 12 months, this is a meaningful maintenance concern.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear for a package handling CAPTCHA configuration and secrets.

Workflow auditcaution

The single workflow uses read-only permissions, but all 3 action references are unpinned and the audit found a high-confidence medium-severity secrets-inherit issue. No untrusted checkout or script-injection path was found, so this is hygiene risk rather than a severe supply-chain warning.