gaya/typo3-hcaptcha

Licensecaution

The artifact declares GPL-2.0-or-later, while its license file is detected as LGPL-3.0; although license files exist in both artifact and repository, the mismatch needs clarification.

Repo bus factorcaution

One contributor made all two recent commits, creating a concentrated maintenance base. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only two commits were recorded in the last three months. That is evidence of some activity, but it is too little to demonstrate a strong maintenance cadence by itself.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool is reported, leaving a modest transparency and detection gap.

Security policycaution

The repository has no published security policy, which makes vulnerability reporting and disclosure expectations less clear.