thelia/info-banner-module

Release historycaution

Only two releases exist across roughly 284 days, with releases about 285 days apart. This short and infrequent history limits evidence of sustained maintenance, although the latest release is recent.

Repo commit activitycaution

There were zero commits and zero active maintainers during the last three months. The recent release and repository push partly offset this, but the lack of sustained commit activity is a maintenance concern.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are configured. This is a transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For a small module this is a moderate transparency gap, because users are given no documented process for reporting vulnerabilities.

Token permissionscaution

The release workflow has no top-level token permissions declaration. Although it does not request top-level write access, explicitly limiting permissions would provide stronger release-process hygiene.