Hacker News Reader

AGPL seems problematic here. If a company uses this as their captcha system does it force them to open source their entire code base?

No, the GNU AGPL does not force that. Maybe you are thinking of MongoDB's SSPL[0]?