magento/magento-zf-captcha

Release historycaution

This package has made only one release, on January 20, 2026, so there is little release history to demonstrate sustained maintenance or maturity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which leaves ongoing maintenance unproven despite the recent initial release.

Security policycaution

The repository has no security policy, leaving disclosure and response expectations undocumented; this is a transparency gap for a package involved in CAPTCHA functionality.

Workflow auditcaution

All three analyzed workflow action references are unpinned, and one workflow grants top-level write permissions. The audit found no untrusted checkouts, injection sinks, or other high-confidence dangerous findings, so this is a hygiene concern rather than a severe risk.