haffner/jh_captcha

Release historydanger

The package has 14 releases since February 2017, but none in the last 12 months and its latest release was on September 28, 2022. This is a substantial sign of slowed maintenance for a dependency.

Repo commit activitydanger

The repository had zero commits and zero active maintainers during the last three months. Although it was pushed in August 2024, the current activity gap raises abandonment risk.

Lifecycle scriptscaution

The package defines a post-autoload-dump install-time script. This adds execution during dependency installation and warrants some caution, although the signal does not show that the script is malicious or unusually complex.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while 8 issues and 3 pull requests remain open. Together with the absent recent commits, this suggests limited current maintenance.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are present. That is a modest repository-hygiene gap, not evidence that the release is unsafe by itself.