thelia/pop-in-module

Licensecaution

The package declares GPL-3.0-or-later but its included license file is detected as LGPL-3.0, creating a licensing clarification risk despite the presence of a license file.

Repo bus factorcaution

One contributor made all 2 commits in the last 3 months. Organization ownership provides some handoff capacity, but recent work remains concentrated.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency gap rather than evidence of abandonment.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers or audit findings, but both action references are unpinned, weakening reproducibility and supply-chain hygiene.