@datadog/datadog-ci-plugin-gate

Package scaffoldingcaution

The artifact includes a substantial README, and the repository has tests; the README also warns that Quality Gates is deprecated in favor of PR Gates, which makes this release transitional despite the otherwise good documentation.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, creating some uncertainty about package-to-repository linkage; the organization context makes a monorepo subpackage plausible but does not remove that gap.

Security policycaution

No repository security policy was found, leaving disclosure and response procedures unclear; the active organization and Dependabot provide some operational compensation but do not replace a policy.

Workflow auditcaution

All four workflows were analyzed and all 109 action references are pinned, with no untrusted checkout or script-injection findings. However, one file failed audit, the release workflow has broad top-level write permissions, and high-confidence template-injection findings plus an ad hoc package install warrant workflow hygiene caution.