thelia/header-highlights-module

Repo toolingcaution

The project uses Composer build tooling, but no security-scanning tool was detected. This is a modest transparency and maintenance gap, not a severe risk given the active repository and simple dependency profile.

Security policycaution

The source repository has no security policy. That weakens vulnerability-reporting transparency, although active commits and recent releases provide compensating maintenance evidence.

Token permissionscaution

The release workflow does not declare top-level token permissions. Explicit least-privilege permissions would improve release security and reproducibility, so this is a workflow-hardening concern.