JavaScript · MIT
WebDecoy/FCaptcha
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
★ 227
Stars
24 forks · 12 open issues
—
Growth · stale
We stopped seeing this repository in its topic's top results, so its star count is frozen at the date it was last read. Subtracting from a frozen number would read as zero growth, which would be false, so no rate is shown.
21.0
Momentum / 100
see the breakdown below
10mo ago
Created
last push 13d ago
Star history
Only 1 snapshot so far — we started watching
this repository on 2026-10-27.
The chart appears once there are two days to compare.
How this score was built
| Component | Weight | Earned | Why |
|---|---|---|---|
| Velocity | 55 | 0.0 | — — no measurable rate |
| Acceleration | 15 | 0.0 | needs 7-day and 30-day rates side by side |
| Freshness | 15 | 14.1 | last push 13d ago; decays to zero at 180 days |
| Scale | 15 | 6.8 | 227 stars, log-scaled against 150k — stops a 3-star repo topping the board |
| Momentum | 100 | 21.0 | capped at 35 because growth is unmeasured |
Detail
| Topics | ai-bot-detectionanti-botbehavioral-analysisbot-detectioncaptchafingerprintinggoheadless-browser-detectioninvisible-captchanodejsplaywright-detectionproof-of-workpuppeteer-detectionpythonscraping-protectionsecurityselenium-detectorself-hostedtls-fingerprintingweb-security |
| Matched on | Security (security) |
| Short window | +0 stars over 9 days = 0.0/day |
| Long window | no snapshot 14–45 days old yet |
| Lifetime average | 0.73 stars/day over 311 days |
| First seen here | 2026-10-27 |
| Last read | 11d ago |