thelia/colissimo-pickup-point-module

Licensecaution

The release declares GPL-3.0-or-later and includes a license file, but the detected artifact text is LGPL-3.0, so the licensing terms should be clarified before adoption.

Repo bus factorcaution

All 9 recent commits came from one contributor, creating a meaningful continuity risk despite the organization-owned repository.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or unsafe-trigger sinks. Its one action use is unpinned, which is a minor reproducibility and supply-chain hygiene gap.