@datadog/datadog-ci-plugin-deployment

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, creating some uncertainty about package-to-repository linkage; the organization-owned monorepo context partly offsets that concern.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations less transparent despite the project's active maintenance.

Workflow auditcaution

All four workflows were analyzed and all 109 action references are pinned, but one file failed audit; publish-release.yml has repeated high-confidence template-injection findings and top-level write permissions, while low-confidence cache findings and an ad hoc package install add hygiene concerns.