@datadog/datadog-ci-plugin-coverage

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, which creates some uncertainty about package-to-repository linkage. The organization-owned monorepo context partly offsets the name mismatch but not the lack of a README mention.

Security policycaution

No security policy was found in the repository, leaving vulnerability-reporting expectations less explicit for consumers and maintainers.

Workflow auditcaution

All four workflows were analyzed, but one file failed analysis, so the audit is incomplete. High-confidence template-injection findings appear in publish-release.yml, and that workflow has top-level write permissions; the low-confidence cache findings and low-severity ad hoc package install add smaller hygiene concerns.