Open source CAPTCHA with PoW, bot detection, and Vision AI protection
npm install @webdecoy/fcaptchaOpen source CAPTCHA with Proof of Work, bot detection, and Vision AI protection.
``bash`
npm install @webdecoy/fcaptcha
`javascript
const { createScoringEngine } = require('@webdecoy/fcaptcha');
// Create a scoring engine
const engine = createScoringEngine({
secret: process.env.FCAPTCHA_SECRET
});
// Generate a PoW challenge
const challenge = engine.generateChallenge('my-site', clientIP);
// Verify a submission
const result = engine.verify(signals, clientIP, siteKey, userAgent, headers, powSolution);
if (result.success) {
// User passed verification
console.log('Score:', result.score);
console.log('Token:', result.token);
}
`
- Proof of Work - SHA-256 challenges that force compute cost on attackers
- Vision AI Detection - Detects screenshot→API→click automation patterns
- Bot Detection - Headless browsers, WebDriver, Puppeteer, Playwright, Selenium
- Behavioral Analysis - 40+ signals including micro-tremor and velocity variance
- Privacy-First - No persistent fingerprinting or cross-site tracking
`javascript``
const {
ScoringEngine, // Main verification engine
PoWChallengeStore, // Challenge storage
RateLimiter, // Rate limiting
FingerprintStore, // Fingerprint tracking
detection, // Detection utilities
createScoringEngine, // Factory function
createMiddleware, // Express middleware factory
} = require('@webdecoy/fcaptcha');
Full documentation: github.com/webdecoy/fcaptcha
MIT