puntodev/mercadopago

Repo popularitycaution

The repository has only 2 stars and 1 fork, providing little external adoption evidence; this is a cautionary supporting signal rather than a standalone health verdict.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest security-process gap.

Security policycaution

The repository has no SECURITY.md or other detected security policy, reducing vulnerability-reporting transparency.

Token permissionscaution

One workflow lacks top-level permissions and another declares top-level write permissions; although no dangerous workflow behavior was detected, the permission posture is not fully least-privilege.