thelia/top-products-module

Repo bus factorcaution

All four recent commits came from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Four commits from one active maintainer in the last three months show current activity, though the narrow activity base limits maintenance resilience.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected; this is a modest transparency gap rather than a severe risk.

Workflow auditcaution

The workflow audit completed fully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. Its single action reference is unpinned, a minor reproducibility and supply-chain hygiene gap.