kiwicaptcha / kiwicaptcha-risk-php

v1.0.1 2026-10-30 21:47 UTC

Requires

• php: >=8.1
• ext-json: *
• kiwicaptcha/kiwicaptcha-php: ^1.0
• predis/predis: ^3.5

Requires (Dev)

• phpunit/phpunit: ^10.5
• symfony/cache: ^6.0|^7.0

Suggests

• ext-intl: Required only for the optional target-identifier normalization pipeline (nfkc)
• ext-mbstring: Required only for the optional target-identifier normalization pipeline (unicode case folding)

MIT

• Bel Consulting OÜ

• security
• captcha
• adaptive
• privacy
• sha256
• risk
• proof-of-work
• argon2

Published on Packagist.org on 2026-10-30 21:51 UTC

README

Privacy-first, self-hosted risk scoring for proof-of-work challenge issuance decisions. Protocol-identical mirror of the cross-language risk-v1 contract shared with the Rust engine (kiwicaptcha-risk).

This package is the risk layer used by the standalone Symfony bundle bel-consulting/kiwicaptcha-symfony. It embeds the same canonical Lua scripts and is held to machine-checked scoring parity with the Rust engine.

Install

composer require kiwicaptcha/kiwicaptcha-risk-php

Requires kiwicaptcha/kiwicaptcha-php ^1.0 and Predis. The package is distributed as a standalone Git repository (this repo); once registered on Packagist, Composer resolves it from the Packagist metadata and this repository's tagged releases.

What this is not

Not a third-party scoring service. No outbound network calls are made by the engine itself. No third-party tracking. Adaptive signals are self-hosted and first-party only.

License

MIT — see LICENSE.

Issues and pull requests for the whole product live in the monorepo: Bel-Consulting-OU/kiwicaptcha.