thelia/keyword-module

Licensecaution

The artifact declares LGPL-3.0+ but its detected license file is GPL-3.0, so the licensing information does not clearly align even though a license file is present.

Repo package mentioncaution

The linked repository is named Keyword and does not mention this package in its README, which creates some uncertainty that it is the intended source repository.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully audited with no injection or high-severity findings, but its one action reference is unpinned; the absence of a top-level permissions block is acceptable on its own.