conekta/conekta-php

Repo bus factorcaution

All four recent commits came from one contributor, creating a meaningful concentration risk despite the repository being organization-owned.

Security policycaution

No security policy was found in the repository, which leaves vulnerability reporting and response expectations unclear for an API client library.

Version stabilitycaution

The assessed 9.0.0 release is stable and not a prerelease, but the collected latest registry version is 7.2.0, an inconsistency that reduces confidence in the release metadata.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no detected dangerous sinks or audit findings. However, all 5 action references are unpinned, weakening build reproducibility and update integrity.