@datadog/datadog-ci-plugin-dora

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, creating some uncertainty about the exact package-to-source relationship; the organization-owned monorepo context partly offsets that concern.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance less transparent for consumers.

Workflow auditcaution

All four workflows were analyzed, but one file failed audit. High-confidence template-injection findings and a high-confidence ad hoc package install merit workflow hygiene attention; low-confidence cache findings are not independently decisive, and no untrusted checkout or script-injection sink was found.