- How do I install lake/login-captcha in a Laravel app?
- Install it with Composer using lake/login-captcha, publish the package config, and enable the extension through Dcat-admin's extension manager. Integration is intentionally lightweight because the package only hooks the Dcat-admin login form. Confirm your Dcat-admin and Laravel versions first, since no version matrix is published.
- Does lake/login-captcha work with Laravel 10 or Laravel 11?
- There is no published version matrix, and the last release was 2023-03-20, which predates several Laravel and Dcat-admin minor releases. Do not assume Laravel 10 or 11 support. Run a compatibility spike on your exact PHP, Laravel, and Dcat-admin versions, exercising successful login, failed login, and lockout flows.
- Is lake/login-captcha a general-purpose Laravel CAPTCHA package?
- No. lake/login-captcha is a tightly scoped plugin for Dcat-admin, not a general-purpose Laravel CAPTCHA package. If your application uses Filament, Nova, or a custom Blade admin, it has effectively zero architectural relevance. Use a general Laravel CAPTCHA package or a managed service such as hCaptcha or Turnstile at the login controller or middleware layer instead.
- Which Dcat-admin versions are supported by lake/login-captcha?
- The package documentation does not state which Dcat-admin major versions it supports. Pin the Dcat-admin version used by your host application and test the extension against it before adoption. Because the package hooks Dcat-admin's service-provider and view-rendering model, a major-version mismatch can break login form rendering or validation.
- How does lake/login-captcha protect against brute-force and credential stuffing?
- It injects a CAPTCHA challenge into the Dcat-admin login form to block automated credential-stuffing and brute-force attempts. It augments the login flow rather than replacing authentication. The package context does not confirm rate-limiting or replay-protection features, so pair it with your own login throttling and monitoring.
- Is the CAPTCHA session-backed or cache-backed, and how does it scale behind a load balancer?
- The available context does not specify whether the challenge is session-backed, cache-backed, or stateless. Session-bound CAPTCHAs can fail behind load balancers when sticky sessions are unreliable. Validate the login flow in a production-equivalent, horizontally scaled staging environment, or prefer a cache-backed or managed CAPTCHA if scaling behavior is unclear.
- Will lake/login-captcha interfere with API login or Dcat-admin's auth guard?
- There is no documented statement about interference with programmatic or API login, or with Dcat-admin's own auth guard. Because the package is a login-layer view extension, test both browser and API authentication paths in staging. If conflicts appear, scope the CAPTCHA to the web login route or middleware rather than the shared guard.
- Does lake/login-captcha provide an accessible audio CAPTCHA alternative?
- The package context provides no evidence of an audio or otherwise accessible CAPTCHA alternative. Visual challenges raise WCAG accessibility concerns, and this package likely does not address them. If accessibility is a requirement, evaluate a managed CAPTCHA with accessible modes or provide an alternative verification path.
- Is lake/login-captcha actively maintained?
- Maintenance signals are weak: 32 stars, 0 dependents, a last release dated 2023-03-20, and a composite score of 0.31. Treat it as stale and be prepared to fork and own it before it touches production authentication. Monitor issues and pull requests, or vendor it into your namespace so you control framework-upgrade fixes.
- What alternatives should I use if I am not on Dcat-admin?
- If you are not on Dcat-admin, drop this package and use a framework-native CAPTCHA package or a managed service like hCaptcha or Turnstile. Apply it at the login controller or middleware layer so it works with your actual admin panel. A small custom CAPTCHA middleware may also be preferable to adopting an unmaintained Dcat-admin-only plugin.