thelia/google-shopping-xml-module

Repo bus factorcaution

One contributor made all 7 commits in the last 3 months, creating a meaningful continuity risk. Organization backing provides some handoff capacity, but no second recent contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy. That makes vulnerability reporting and response expectations less clear for adopters.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but its one action use is unpinned. The absence of a top-level permissions block is not concerning by itself.