thelia/core

Dependency profilecaution

The package declares 62 runtime dependencies, including a broad Symfony and application framework stack. This is consistent with a full e-commerce core but increases integration and dependency-maintenance complexity.

Repo bus factorcaution

One contributor made 255 of 276 recent commits, or about 92%, creating a real concentration risk. The organization-owned project and eight additional active contributors provide some ability to hand maintenance off.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. That is a transparency and preventive-maintenance gap, though it is not evidence that the release is unsafe by itself.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations unclear. This is a genuine transparency gap for a core e-commerce package.