salihkiraz/lumen-captcha

Release historydanger

The package has made no registry releases in roughly six years: its latest release was September 24, 2020, with zero releases in the last 12 months. This is strong evidence of abandonment risk.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the roughly six-year gap since the last push. This materially increases maintenance and abandonment risk.

Dependency profilecaution

The package has seven runtime requirements, including PHP extensions and image/framework libraries. This is a noticeable integration surface but not excessive for a Lumen captcha package.

Licensecaution

The manifest declares MIT and a license file is present, but the detected Apache-2.0 text is in a bundled font path and is not covered by the package declaration. Clarify the bundled assets' licensing before adoption.

Project backingcaution

The repository is owned by the same individual namespace as the package, but it is user-owned rather than organization-backed. This provides direct ownership alignment without a broader maintenance base.