visavi/captcha

Maintainerscaution

Only one account has registry publishing access, and the backing repository is owned by a user rather than an organization. This creates some continuity risk if that maintainer becomes unavailable.

Repo popularitycaution

The repository has one star, one fork, and one watcher, indicating a very small public community around the project. Low popularity is supporting caution rather than evidence of abandonment because recent release activity is present.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured. This is a transparency and hygiene gap, not a severe dependency risk by itself.

Security policycaution

The repository has no security policy. For a library that generates captcha images, this reduces the clarity of vulnerability-reporting and response practices, though it does not establish that the release is unsafe.