Package Health/mcaskill/charcoal-recaptcha

mcaskill/charcoal-recaptcha

The repository remains active enough to have a recent push, tests, release notes, and matching package references. However, the registry shows no releases in over eight years, and its reported latest version predates the assessed release; there is also no security policy or scanning.

Latest v0.5.0

Packagist

50%

Total Score

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in over eight years, despite six releases early in its history. That long release gap is a substantial maintenance concern, though the repository's recent push provides some compensating evidence.

Repo popularity

The repository has one star and two forks, indicating limited adoption. Popularity is only supporting evidence, so this modest footprint does not independently make the package unfit.

Repo tooling

The repository uses Composer, but no security scanning tool was detected. The missing scanning is a modest transparency gap, not evidence that the release is unsafe.

Security policy

No repository security policy was found. For a package handling CAPTCHA integration, this weakens the documented process for reporting and managing security issues.

Version stability

The registry reports v0.3.0 as the latest version while this assessment covers v0.5.0, creating a transparency and reproducibility concern. The release is not marked prerelease, so this is not merely normal prerelease churn.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Chauncey McAskill

Direct Dependencies

Dependency	Last Release	Score
pimple/pimple Version ^3.0	—	—
google/recaptcha Version ^1.1	—	—
psr/http-message Version ^1.0	—	—
locomotivemtl/charcoal-config Version ~0.8	—	—