dreistromland/typo3-hcaptcha

Licensecaution

The artifact contains a license file and the repository is licensed, but the detected GPL-3.0 text does not match the declared GPL-2.0-or-later license.

Release historycaution

The package has had no release in the last 12 months, with only two releases across about 28 months; this indicates slow maintenance, though it is not abandonment by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the maintenance slowdown shown by the release history.

Security policycaution

The repository has no documented security policy, leaving vulnerability-reporting expectations unclear for a package that integrates an external captcha service.

Workflow auditcaution

All five workflow action references are unpinned, and a high-confidence template-injection finding appears in the publish workflow. There are no untrusted checkouts or script-injection findings, so this is workflow hygiene risk rather than a severe dependency-health failure.