thelia/sitemap-module

Repo bus factorcaution

All 4 recent commits came from one contributor, creating a narrow maintenance base. Organization ownership partly compensates because maintenance can be handed off within the project.

Repo toolingcaution

Composer is used for builds, but no security scanning tool was detected. The separate security policy provides some governance, so this is a modest hygiene gap rather than a severe risk.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers or audit findings, but its single action use is unpinned. The missing top-level permissions block is acceptable on its own, while the unpinned reference is a minor reproducibility and supply-chain hygiene concern.