PHPackages isapp/statamic-honeypot - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. [Security](/categories/security) 4. / 5. isapp/statamic-honeypot ActiveLibrary[Security](/categories/security) isapp/statamic-honeypot ======================= A lightweight, no-CAPTCHA spam protection module that silently blocks bots without disrupting real users. 6.0.0(5mo ago)0316proprietaryPHPPHP ^8.2CI passing Since Jan 8Pushed 5mo agoCompare [ Source](https://github.com/isap-ou/statamic-honeypot)[ Packagist](https://packagist.org/packages/isapp/statamic-honeypot)[ RSS](/packages/isapp-statamic-honeypot/feed)WikiDiscussions 6.x Synced today READMEChangelog (4)Dependencies (4)Versions (6)Used By (0) Honeypot Spam Protection ======================== [](#honeypot-spam-protection) > ⚠️ **Important — Commercial addon** > This addon is paid software. You may use it for free during development, but you must purchase a valid license from the [Statamic Marketplace](https://statamic.com/marketplace) before deploying it to a production environment. > 📌 **Statamic version** > This documentation is for **Statamic 6**. > For **Statamic 5**, see the [5.x branch](../../tree/5.x). Introduction ------------ [](#introduction) **Honeypot Spam Protection** is a commercial Statamic addon that provides a native Statamic integration layer for the open-source package [`spatie/laravel-honeypot`](https://github.com/spatie/laravel-honeypot). This addon does **not** replace or modify Spatie’s package. It connects Statamic’s form system to the existing honeypot and time-based spam protection logic provided by Spatie and exposes it in a way that fits naturally into Statamic projects. --- What this addon does -------------------- [](#what-this-addon-does) This addon makes it possible to use `spatie/laravel-honeypot` inside Statamic without having to wire it up manually in Laravel. It provides: - A Statamic-native way to enable honeypot protection for forms - Automatic integration with Statamic form submissions - Access to all configuration options provided by `spatie/laravel-honeypot` The spam detection logic itself is **entirely provided by Spatie’s package**. This addon is responsible only for the Statamic integration layer. --- How it works (high level) ------------------------- [](#how-it-works-high-level) Internally, this addon installs and uses the Composer package: ``` spatie/laravel-honeypot ``` Spatie’s package provides: - Hidden honeypot fields - Time-based submission protection - Request validation and spam detection This Statamic addon: - Loads the Spatie package - Connects it to Statamic’s form handling pipeline - Applies the honeypot checks when Statamic forms are submitted - Registers Spatie's honeypot middleware in the application's web middleware group by default No changes are made to Spatie’s code, and no part of their package is forked or modified. --- Upgrade guide (Statamic 5 → 6) ------------------------------ [](#upgrade-guide-statamic-5--6) If you are upgrading from Statamic 5 to Statamic 6, note the following changes in this addon: - **Alpine.js integration:** no change — keep using `js="honeypot"`. - **Precognition:** update your forms to use `js="honeypot_precognition"`. - If you previously used `is-precognition="true"` (Antlers) or `is-precognition` (Blade), remove it — it is not required in Statamic 6. If you are staying on Statamic 5, use the documentation on the [5.x branch](../../tree/5.x). --- Installation ------------ [](#installation) Install the addon via Composer: ``` composer require isapp/statamic-honeypot ``` After installation, the Spatie Honeypot package will be available to your Statamic application through this addon. --- Configuration ------------- [](#configuration) This addon uses the standard configuration file provided by `spatie/laravel-honeypot`. All enable/disable behavior is controlled by Spatie's configuration. When honeypot protection is enabled in Spatie's config, the Spatie honeypot middleware is active. When it is disabled, no honeypot checks are performed. This addon does not introduce a separate on/off switch. All configuration options (field names, time limits, enabled/disabled state, etc.) are defined and documented by Spatie and remain unchanged. You can publish and adjust the configuration file as you would when using `spatie/laravel-honeypot` directly in Laravel. --- Using it in Statamic -------------------- [](#using-it-in-statamic) This addon integrates the Spatie honeypot system into Statamic’s form system. You do **not** need to use Statamic’s built-in honeypot or spam protection features. This addon provides its own integration layer based on Spatie’s package. ### Antlers [](#antlers) To enable honeypot protection on a Statamic form, include the tag inside your form: ``` {{ isapp:honeypot }} ``` There is **no automatic injection**. You must add the tag to each form you want to protect. #### Alpine.js [](#alpinejs) If you are using Statamic's Alpine-driven form features (via Statamic's `js` form driver), follow the same approach as in the Statamic documentation, but use `js="honeypot"` instead of `js="alpine"` on your form tag. Example: ``` {{ form:contact js="honeypot" }} {{ isapp:honeypot }} {{ /form:contact }} ``` #### Precognition [](#precognition) If you are using Statamic **Precognition** with Antlers forms, use `js="honeypot_precognition"` on the form tag: ``` {{ form:contact js="honeypot_precognition" }} {{ isapp:honeypot }} {{ /form:contact }} ``` ### Blade [](#blade) #### Simple Blade forms (Spatie) [](#simple-blade-forms-spatie) For simple Blade forms (outside of Statamic's form tags), you can use the default Blade component or directive provided by `spatie/laravel-honeypot` (exactly as shown in Spatie's documentation): ``` ``` Alternatively: ``` @honeypot ``` #### Alpine.js + Statamic forms (Blade templates) [](#alpinejs--statamic-forms-blade-templates) If you are rendering Statamic forms inside Blade templates and you are using Statamic's Alpine-driven form features (via `js="honeypot"` on the form tag), use the Statamic tag component provided by this addon. Important: in this Statamic + Alpine scenario, use `` (this addon), not Spatie’s Blade component/directive. ``` ... ``` ##### Precognition [](#precognition-1) When using Statamic **Precognition** in Blade templates, use `js="honeypot_precognition"` on the form tag: ``` ... ``` --- How spam is detected -------------------- [](#how-spam-is-detected) All spam detection is handled by `spatie/laravel-honeypot`. That includes: - Detecting filled honeypot fields - Detecting submissions that are too fast - Rejecting or flagging suspicious requests This addon does not implement its own spam logic. It simply ensures that Statamic form submissions pass through Spatie’s honeypot validation. --- Compatibility ------------- [](#compatibility) This addon is designed specifically for Statamic and integrates with its form handling system. It does not provide honeypot protection for generic Laravel Blade forms or third-party form builders. --- Credits & Licensing ----------------------- [](#credits--licensing) This addon uses the open-source package: **spatie/laravel-honeypot** Copyright © Spatie Licensed under the MIT License Spatie’s package remains fully open-source and is distributed under its original license. This Statamic addon is a **commercial product** that provides a Statamic-specific integration layer on top of Spatie’s open-source package. No part of Spatie’s code is sold, relicensed, or restricted. --- Support ------- [](#support) Support for this Statamic addon is provided by [ISAPP](https://isapp.be). For issues related to the underlying honeypot logic, please refer to the Spatie package and its documentation. ### Health Score 39 — LowBetter than 84% of packages Maintenance71 Regular maintenance activity Popularity16 Limited adoption so far Community8 Small or concentrated contributor base Maturity51 Maturing project, gaining track record Bus Factor1 Top contributor holds 75% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Every ~2 days Total 6 Last Release 164d ago Major Versions 1.0.2 → 5.x-dev2026-01-08 5.x-dev → 6.0.02026-01-21 ### Community Maintainers ![](https://www.gravatar.com/avatar/9bfb1eae1e3e43813da6740e5eaa39307a95db7561c2d27e7e8aa24233cdcbeb?d=identicon)[andrii-trush](/maintainers/andrii-trush) --- Top Contributors [![andrii-trush](https://avatars.githubusercontent.com/u/14265776?v=4)](https://github.com/andrii-trush "andrii-trush (9 commits)")[![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?v=4)](https://github.com/github-actions[bot] "github-actions[bot] (3 commits)") --- Tags honeypotspam-protectionstatamicstatamic-addon ### Code Quality Code StyleLaravel Pint ### Embed Badge ![Health badge](/badges/isapp-statamic-honeypot/health.svg) ``` [![Health](https://phpackages.com/badges/isapp-statamic-honeypot/health.svg)](https://phpackages.com/packages/isapp-statamic-honeypot) ``` ### Alternatives [statamic-rad-pack/runway Eloquently manage your database models in Statamic. 135224.7k7](/packages/statamic-rad-pack-runway)[statamic/seo-pro 68516.6k](/packages/statamic-seo-pro)[statamic/statamic Statamic 829179.5k](/packages/statamic-statamic)[statamic/eloquent-driver Allows you to store Statamic data in a database. 126741.1k17](/packages/statamic-eloquent-driver)[duncanmcclean/statamic-cargo Comprehensive e-commerce addon for Statamic. Build bespoke e-commerce sites without the complexity. 3417.0k](/packages/duncanmcclean-statamic-cargo)[rias/statamic-redirect 29335.6k](/packages/rias-statamic-redirect) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)