thelia/re-captcha-module

Package scaffoldingcaution

A substantive README is present, but neither the artifact nor repository contains tests or a changelog. The missing tests reduce verification confidence, while the missing changelog is partly offset by the package's active release history and GitHub Releases usage.

Repo bus factorcaution

Three contributors were active, but the top contributor made 80% of recent commits. This concentration creates a resilience concern, partly mitigated by the organization-owned repository and two additional active contributors.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools were detected. The missing scanning is a modest supply-chain hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although it does not by itself indicate poor maintenance and is partly offset by current repository activity.

Token permissionscaution

The one workflow lacks top-level token permissions, so its effective permissions are not explicitly minimized. No top-level write permissions were detected, making this a hygiene concern rather than a severe workflow risk.