eslint-plugin-no-only-tests

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a meaningful sign of currently quiet maintenance.

Repo toolingcaution

The repository uses a build tool, but no security scanning tools were detected; for this small plugin that is a modest transparency gap rather than a severe risk.

Security policycaution

No security policy was found, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All 11 analyzed action references are unpinned, and a high-confidence low-severity adhoc package installation was found in the publish workflow. The cache-poisoning findings are low confidence and therefore count only as hygiene concerns.