thelia/carousel-module

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release and push partly compensate, but this still leaves maintenance continuity uncertain.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. Although organization ownership offers some context, the package-to-repository relationship is not clearly demonstrated.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is moderated by the package's established release history.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, injection sinks, or audit findings. However, its one action reference is unpinned, leaving a modest reproducibility and supply-chain hygiene gap.