thelia/available-default-product-module

Release historycaution

The package is over 7 years old but has only 3 releases, with a median interval of about 3.5 years; one release in the last 12 months shows some current activity but a sparse cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, which is a maintenance concern, although the repository was pushed on the release date.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tooling was detected; this is a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

The sole workflow was fully analyzed with no audit findings or untrusted checkout paths, but its one action reference is unpinned; the missing top-level permissions block is acceptable on its own.