glavweb/captcha-bundle

Release historydanger

The package has only two releases, with the latest published in June 2019 and none in the last 12 months. This long gap is a substantial abandonment concern for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the latest push having occurred in June 2019. This provides no evidence of current maintenance.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are configured. That is a hygiene gap, though it is less significant than the prolonged inactivity.

Security policycaution

The linked repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This reduces transparency for a package that handles CAPTCHA-related application functionality.

Version stabilitycaution

The latest release is v0.2.0 and is not a stable major release, which suggests a relatively immature API alongside the package's long period without updates.