jield-webdev/laminas-recaptcha

Licensecaution

The release declares MIT and includes a license file, but the detected license is GPL-3.0. That mismatch creates uncertainty about the terms under which consumers may use the package.

Release historycaution

Only three releases have been published, with none in the last four years and a median interval of about 14 months. This is a meaningful maintenance concern despite the repository still being present.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. Combined with the old registry release, this suggests limited current maintenance capacity.

Security policycaution

No security policy is present in the linked repository. This is a transparency gap for a package that integrates an external CAPTCHA service, though it is not severe on its own.

Workflow auditcaution

The single workflow was fully analyzed with no high-confidence audit findings or untrusted-trigger sinks. However, all three action references are unpinned, leaving avoidable build-integrity risk.