@datadog/datadog-api-client

Lifecycle scriptscaution

The package runs a prepare script during installation, which adds some install-time behavior and warrants attention, though one standard lifecycle script is not severe on its own.

Security policycaution

No repository security policy was found, which is a transparency gap for reporting vulnerabilities even though CodeQL scanning is present.

Workflow auditcaution

All 15 workflows were analyzed without failures and all 35 action references are pinned, but high-confidence template-injection findings and an unpinned container image create workflow hygiene concerns; the low-confidence cache finding carries little weight.