mochawesome-merge

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, indicating a recent pause in development despite the newer registry release.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with two open pull requests remaining; this suggests limited current project activity.

Repo toolingcaution

The repository reports no build tooling and no security scanning, which weakens automated maintenance and security coverage for a published package.

Security policycaution

No security policy is present in the linked repository, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

The sole workflow uses top-level write permissions and all six action references are unpinned. The audit found no untrusted checkout, injection, or other high-confidence dangerous finding, so this is a hygiene concern rather than a severe risk.