thelia/colissimo-home-delivery-module

Repo bus factorcaution

One contributor made all 4 recent commits, creating a thin operational base. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem. No security-scanning tool was detected, leaving a modest transparency gap.

Workflow auditcaution

Both workflows were fully audited with no dangerous triggers, untrusted checkouts, injection findings, or high-severity issues. However, both of the two analyzed action references are unpinned, weakening build reproducibility.