thelia/rewrite-url-module

Licensecaution

The package declares GPL-3.0-or-later, but its LICENSE.txt is detected as LGPL-3.0; the mismatch should be clarified before adoption despite the presence of a license file.

Repo bus factorcaution

One contributor made 10 of 12 recent commits, creating concentration risk, but two additional contributors remained active and the repository is organization-owned.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool was detected; this is a modest transparency gap rather than evidence of abandonment.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. Its one action reference is unpinned, a minor reproducibility and supply-chain hygiene gap.