phpfui/recaptcha

The repository matches the package and includes tests, release notes, and a substantial README. Its workflow has no detected dangerous findings, but all three actions are unpinned and the repository has no security policy. The small project footprint limits confidence in long-term support.

Latest V2.0.1

Packagist

61%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases have been published, with one release in the last 12 months and a median interval of about 334 days. This suggests a small, infrequently updated project, though the package may be intentionally stable.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months, adding evidence of limited recent maintenance. The release from about nine months earlier provides some compensating activity but does not remove the concern.

Repo popularity

The repository has 1 star, 1 fork, and no watchers, indicating a very small user and contributor footprint. Popularity is only supporting evidence, but this provides little independent confidence in sustained maintenance.

Security policy

The repository has no published security policy. For a library that handles reCAPTCHA verification, this is a transparency and vulnerability-reporting gap.

Workflow audit

The sole workflow was fully analyzed with no dangerous audit findings, but all 3 action references are unpinned. That weakens build reproducibility and supply-chain hygiene without showing an active unsafe workflow.