The MIT declaration and small dependency surface are reassuring. There is no test suite, changelog, security policy, or recent development evidence to support adoption.
32%
Total Score
25
100
75
50
The package has had only two releases, both in August 2015, with no releases in roughly 11 years. This is strong evidence of abandonment for a dependency.
The repository recorded zero commits and zero active maintainers in the past three months, consistent with the release history showing no activity since August 2015.
Only one registry maintainer is listed. Because the project is user-owned rather than organization-backed, there is no broader ownership context to compensate for the thin maintainer base.
The package and repository each contain only composer.json and one source file. This may reflect a deliberately small package, but it provides little visible project structure to support maturity or maintainability.
The artifact has no README, tests, or changelog, although the GitHub release for this version provides some release documentation. The missing consumer documentation and tests still reduce transparency for a library.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
captcha-com/captcha Version 3.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.