thelia/flexy

Dependency profilecaution

The template declares 22 runtime dependencies, including multiple Thelia, Symfony, Twig, and frontend-related components. This is a meaningful maintenance surface, but it is coherent with a full front-office template.

Repo issue activitycaution

The repository received 10 new issues and 3 new pull requests in the last month, but closed no issues; the 55 merged pull requests show substantial ongoing change despite unresolved issue backlog.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured. That is a transparency and hygiene gap, not evidence of unsafe code by itself.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and disclosure expectations undocumented.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all 5 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.