thelia/shopping-feed-module

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, which is a meaningful maintenance warning. The recent registry release provides some compensating evidence, but does not demonstrate ongoing source activity.

Security policycaution

The repository has no security policy and no security scanning tools. This weakens transparency and vulnerability-reporting hygiene, although it does not by itself show an unsafe release.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but its one action use is unpinned and the workflow has no top-level permissions block. These are limited supply-chain hygiene concerns rather than severe workflow risk.