spectrocoin/prestashop-merchant

Licensecaution

The package declares GPL-3.0-or-later and includes a license file, but the artifact also contains detected GPL-2.0 text that the declaration does not cover. The declaration and repository license evidence compensate for the presence gap, but the mismatch warrants caution.

Repo bus factorcaution

Two contributors are active, but one produced about 73% of the last three months’ commits. The organization backing provides some handoff capacity, yet the observed activity remains concentrated.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. Although a naming difference can occur in a related repository, the lack of an explicit package reference leaves package-to-source identity less transparent.

Repo popularitycaution

The repository has only 2 stars and 5 forks, so external adoption evidence is limited. Popularity is supporting evidence rather than a requirement, and the active release and commit signals offset much of this concern.

Security policycaution

The repository has no published security policy. This is a transparency gap for a payment integration, although active maintenance and security scanning provide partial compensation.