oxid-solution-catalysts/telecash-module

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Although a release was published during the observed period, the lack of recent development activity is a maintenance concern.

Security policycaution

The repository has no SECURITY.md or equivalent security policy. This is a transparency and reporting gap, although it is partly offset by the presence of Dependabot and Sonar scanning.

Version stabilitycaution

v1.0.0-rc.5 is a prerelease, and all recent releases are prereleases. That increases compatibility uncertainty for production consumers.

Workflow auditcaution

All 51 analyzed action references are unpinned, which weakens build reproducibility. The audit found high-confidence template-injection patterns, but no pull_request_target or workflow_run triggers and no untrusted checkout or script-injection sinks, so this remains a hygiene concern rather than a severe workflow risk.