@profullstack/form-guard

Contact-form spam control: signed proof-of-render token, honeypot, fill-time floor, per-IP rate limit, and scoring that tags but never drops. Zero dependencies.