frosh/altcha-captcha

Repo bus factorcaution

One contributor made all 6 recent commits. Organization ownership provides some handoff capacity, but no second active contributor is shown in this period.

Repo commit activitycaution

The repository had 6 commits in the last 3 months, but activity is limited to one active maintainer, leaving maintenance continuity dependent on one person.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and disclosure expectations less explicit for a security-relevant CAPTCHA plugin.

Workflow auditcaution

Both workflows were analyzed cleanly with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 5 action references are unpinned, which is a supply-chain hygiene weakness.