diablomedia/zendframework1-service-recaptcha

Dependency profilecaution

Six runtime dependencies, including several related Zend Framework components, create a meaningful dependency surface for a small component. The dependencies are thematically consistent with the package, so this is a manageable rather than severe concern.

Release historycaution

The package has existed for over 8 years with 9 releases, but only one release in the last 12 months and a median interval of about 340 days indicate slow maintenance. The latest release is still recent enough to avoid an abandonment verdict.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Although the release and a repository push occurred earlier, the current lack of observed development lowers confidence in ongoing maintenance.

Security policycaution

No repository security policy was found. This is a transparency gap for reporting vulnerabilities, though it is not by itself evidence that the package is unsafe.

Token permissionscaution

One workflow has no top-level token permissions and another grants top-level write access. Explicit least-privilege permissions would provide stronger workflow hygiene, despite the absence of other dangerous workflow patterns.