pieceofcake2/captcha

Release historycaution

This is the package's first release, published less than a day ago, so there is no release track record yet; that limits maturity evidence without proving abandonment.

Repo commit activitycaution

No commits or active maintainers were recorded in the preceding three months. Because the repository and package are brand new, this is limited evidence of maintenance rather than strong abandonment evidence.

Workflow auditcaution

The sole workflow was fully analyzed and has no untrusted checkout or script-injection path, but all 13 action references are unpinned and two high-confidence findings report unpinned container images; the workflow also grants top-level write permissions.