pstk/paystack-magento2-module

Security policycaution

The repository has no published security policy, which leaves vulnerability-reporting expectations unclear for a payment integration. This is a transparency gap, but active commits and CodeQL provide partial compensation.

Workflow auditcaution

Both workflows were analyzed without audit findings, and permissions are scoped or read-only where declared. Four of seven action references are unpinned, a minor reproducibility and update-safety gap without an accompanying untrusted trigger or dangerous sink.