dashworthy/pest-plugin-visualizations

Repo bus factorcaution

All six recent commits came from one contributor, creating a meaningful continuity risk. Organization backing provides some ability to hand off maintenance, but no second active contributor is evidenced.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. For a small testing plugin this is a hygiene gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This lowers transparency, although the package's small scope limits the significance of the gap.

Token permissionscaution

The only workflow lacks a top-level permissions declaration. No write permissions were detected, but explicitly constraining the token would provide stronger CI security hygiene.

Version stabilitycaution

Version 0.1.2 is not yet a stable-major release, so the API may still change; however, it is not marked as a prerelease and recent versions have been released normally.