puntodev/paypal

Repo popularitycaution

The repository has 0 stars and 0 forks, with only 1 watcher, so popularity offers no meaningful corroboration of maturity; this is supporting evidence only and does not outweigh the active release and commit history.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured; the missing scanning is a repository hygiene gap rather than evidence of maintenance failure.

Security policycaution

The repository has no SECURITY.md or other security policy, leaving vulnerability-reporting and response expectations undocumented.

Token permissionscaution

One workflow lacks top-level permissions and another declares top-level write permissions, which weakens least-privilege workflow hygiene even though no dangerous workflow pattern was detected.