Catalogue · Section 02 · Entry
hcaptcha-challenger
SEMI
hcaptcha-challenger is a Python project catalogued in section 02 of this register. Multimodal-LLM hCaptcha solver; the clearest public example of the model-based turn in captcha solving. It reads SEMI: alive but slowing. The liveness field this register read is about 7 months old, which is past ACTIVE and well short of the band where the rubric stops recommending it.
https://github.com/QIN2DIM/hcaptcha-challenger
The fields this state was derived from
| Field | Value at this printing |
|---|---|
| pushed_at | 2026-01-28 |
| archived | false |
| latest_release | — |
| license.spdx_id | GPL-3.0 |
| stargazers_count | 2500 |
| http_status | 200 |
| fetched_at | 2026-08-14T09:12:00Z |
| endpoint | GET https://api.github.com/repos/QIN2DIM/hcaptcha-challenger |
| rubric_edition | 2nd, in force since 2026-08-14 |
A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON
Why it reads SEMI
pushed_at = 2026-01-28 — 198 days, inside the 90–365 day SEMI band.
Alive but slowing. Watch it.
Under the superseded first edition
Unchanged: the first edition read SEMI from the same fields.
The rubric in force · The superseded first edition · Errata leaf
What hcaptcha-challenger actually does
Uses multimodal models to answer image challenges, and is the clearest public example of the shift in captcha solving from hand-built classifiers to general models prompted at the challenge.
What hcaptcha-challenger's maintenance signals mean
pushed_at reads 2026-01-28, which is 198 days before the field check and therefore inside the 90-to-365-day band this rubric calls SEMI. SEMI is the first edition's ACTIVE bucket after it was split in two, and the split exists because a quarter of silence in this field is a fact worth printing rather than absorbing.
A SEMI entry is not a warning and not a recommendation. It is a request to look: open the commit history and see whether the gap is a maintainer between jobs, a project that has reached a stable shape and stopped needing changes, or an abandonment that has not yet crossed a threshold. All three produce the same field value, and this register cannot tell them apart — it can only make sure you know the gap is there.
No release was captured for this entry, which this register records as unknown rather than as none. The distinction matters more than it looks: a project with no tags and a project whose tags the sweep failed to read produce the same blank cell, and printing them as the same fact would be the register asserting something it has not measured.
Where hcaptcha-challenger sits in this catalogue
hcaptcha-challenger is filed in section 02, automation stealth plugins, patches & cdp-leak fixes, whose scope is this: Patches and plugins for Puppeteer, Playwright and Selenium, plus the proxies and cursor libraries that sit beside them. An entry sits in exactly one section here. Where a project could defensibly go in two, it is placed where a reader would look for it first rather than where it fits most tidily, and that is an editorial decision rather than a measured one.
Filed beside it in the same section: BrowserForge (SEMI), fingerprint-suite (Apify) (ACTIVE). Comparing an entry against its own section-mates is more informative than comparing it against the catalogue as a whole, because everything in a section is answering roughly the same question and the differences left over are the ones that matter.
It is published under GPL-3.0, alongside the rest of the GPL-3.0 entries in this register, and it sits with everything else currently marked SEMI. Read those two facets together: a permissively licensed project that stopped shipping is not a safer dependency than a copyleft one that did not, and a filter on one axis alone will tell you the wrong thing.
What to settle before you adopt hcaptcha-challenger
Model-based solving carries per-call cost and latency that a classifier did not, so the economics differ from what older tooling taught. GPL-3.0 and the model provider's own terms are both part of the decision.
Questions readers ask about hcaptcha-challenger
Answered from this entry's own fields, at the field check printed above and at no other instant.
Is hcaptcha-challenger still maintained?
At the 2026-08-14 field check this register read pushed_at as 2026-01-28 and the archive flag as false, and the rubric in force turned those into SEMI. Alive but slowing. Watch it. The clause that fired is printed on this page, so you can check the arithmetic rather than take the word.
What else in this registry does the job hcaptcha-challenger does?
No substitution edge is declared for this entry, which means nobody has stated one rather than that none exists. The nearest comparison available is the rest of section 02, where everything is answering roughly the same question on the same printed fields.
What licence is hcaptcha-challenger under?
GPL-3.0, read from the repository's own licence metadata at the field check rather than from a README badge. Other GPL-3.0 entries are grouped together, and the no-licence-declared group is worth a look before you assume any project here carries a grant.
Where does this status come from?
From one sweep, recorded with the instant it ran. The raw fields, the endpoint they were read from, the fetch timestamp and the rubric edition in force are all printed on this page, and the same row is in the CC0 data files in JSON and CSV. Recompute the state from those columns and this page must agree with you; where it does not, the register is wrong.
Everything in section 02 is a patch applied to somebody else's automation stack, which means every one of them inherits that stack's release cadence and breaks on its own schedule. Donut Browser starts from the other end: the fingerprint handling is in the browser it ships rather than in a layer bolted onto a driver, and the local REST API and MCP server mean automation talks to it directly instead of through a patched client library.
curl -fsSL https://donutbrowser.com/install.sh | sh
macOS (DMG, Homebrew cask donut), Windows (installer and portable), Linux (deb, rpm, AppImage, with APT and RPM repositories at repo.donutbrowser.com), and a Nix flake. Desktop only — there is no mobile build target. Ten shipped languages. Source, AGPL-3.0 · its own entry, judged by the same rubric · the keepers' disclosure.