conekta/conekta_payments

This is a generally usable and transparently packaged Magento payment extension: it has a stable current release, a substantial release history, documented installation, tests, a changelog, an organization-owned repository, and no deprecation or archival indication. The main concern is that repository commit activity shows zero commits and zero active maintainers in the last 3 months, despite recent release and push timestamps, which weakens evidence of ongoing maintenance. Missing security scanning, a security policy, and explicit workflow token permissions are additional hygiene gaps, but the repository contains no detected dangerous workflow patterns and the package has no install-time lifecycle scripts.

Latest 5.5.2

Packagist

70%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last 3 months. This conflicts with the recent release and push timestamps but still weakens evidence of active development.

Repo popularity

The repository has 5 stars, 9 forks, and 9 watchers. This is limited adoption evidence, but popularity is supporting context rather than a decisive health criterion.

Repo tooling

The repository uses Make and Composer build tooling, but no security scanning tools were detected. The build tooling is positive while the missing security automation is a hygiene gap.

Security policy

No security policy was found in the repository, reducing transparency about vulnerability reporting and coordinated disclosure for a payment integration.

Token permissions

The sole workflow has no top-level token permissions declaration. No write permissions were detected, but explicit least-privilege configuration would provide stronger CI security hygiene.