mongdch/mon-captcha

The project has released twice in the last 12 months and pushed the current version recently. Maintenance depends on one active contributor, while the repository has no security policy or scanning; its license, documentation, and minimal dependencies are otherwise reassuring.

Latest 1.3.4

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made all commits in the last three months, giving the project a 100% top-contributor share. This creates a meaningful continuity risk for a user-owned project.

Repo commit activity

Only one commit was recorded in the last three months, made by one active maintainer. The recent activity is positive, but the volume is thin and provides limited evidence of sustained maintenance capacity.

Repo popularity

The repository has zero stars and forks and only one watcher, so there is little external validation or visible community support. Recent maintenance partly offsets this, making the concern modest rather than severe.

Repo tooling

The repository uses Composer for builds, but no security-scanning tooling was detected. Build support is present, while security verification remains limited.

Security policy

The repository has no security policy. For a captcha library handling application-facing input, this weakens vulnerability-reporting transparency and raises a modest maintenance concern.