
Security News
curl Shuts Down Bug Bounty Program After Flood of AI Slop Reports
A surge of AI-generated vulnerability reports has pushed open source maintainers to rethink bug bounties and tighten security disclosure processes.
@friendlycaptcha/sdk
Advanced tools
The SDK that is used to integrate Friendly Captcha v2 into your website.
This is the code that runs on your website, inserting the captcha widget.
☝️ This is the SDK for Friendly Captcha v2 only. If you are looking for the v1 SDK, you can find that here.
# using npm
npm install @friendlycaptcha/sdk
# using yarn
yarn add @friendlycaptcha/sdk
You can then use it in your library.
import { FriendlyCaptchaSDK } from "@friendlycaptcha/sdk"
// Re-use this SDK if you are creating multiple widgets.
const sdk = new FriendlyCaptchaSDK();
// HTML element that you want to mount the widget under.
const mount = document.querySelector("#my-widget-mount");
// Create the widget
const widget = sdk.createWidget({
element: mount,
sitekey: "<your sitekey>"
});
You can also require the SDK if your environment uses CommonJS.
var { FriendlyCaptchaSDK } = require("@friendlycaptcha/sdk");
// Re-use this SDK if you are creating multiple widgets.
const sdk = new FriendlyCaptchaSDK();
The documentation can be found in our Developer Hub, and the Getting Started guide.
If you want to develop this SDK itself the following commands are useful
# install dependencies
npm install
# minimal build
npm run build
# build for distribution (also builds docs)
npm run build:dist
# run the basic unit tests
npm run test
We include more proper end-to-end tests in the sdktest tool folder.
We automatically generate markdown docs and translate these into files that are in a format that works for Docusaurus. You will then need to update the docs manually by deleting the old files and adding the new ones. Something like this:
rm -rf ../friendly-docs/docs/sdk/reference && mkdir ../friendly-docs/docs/sdk/reference && cp -r ./dist/docs/docusaurus/ ../friendly-docs/docs/sdk/reference/
# print those files that would be changed
npm run license-check-and-add -- check
# add the headers
npm run license-check-and-add -- add
This is free software; you can redistribute it and/or modify it under the terms of the Mozilla Public License Version 2.0.
Contributions are welcome.
Prior to us being able to accept your contribution you will need to sign our CLA (Contributor License Agreement).
FAQs
In-browser SDK for Friendly Captcha v2
The npm package @friendlycaptcha/sdk receives a total of 15,574 weekly downloads. As such, @friendlycaptcha/sdk popularity was classified as popular.
We found that @friendlycaptcha/sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A surge of AI-generated vulnerability reports has pushed open source maintainers to rethink bug bounties and tighten security disclosure processes.

Product
Scan results now load faster and remain consistent over time, with stable URLs and on-demand rescans for fresh security data.

Product
Socket's new Alert Details page is designed to surface more context, with a clearer layout, reachability dependency chains, and structured review.