mateffy/pest-plugin-html-reports

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, which is a meaningful maintenance concern for a package only about one year old.

Security policycaution

The linked repository has no security policy, reducing transparency about how vulnerabilities are reported and handled.

Workflow auditcaution

All 4 analyzed GitHub Actions references are unpinned, and one workflow grants top-level write access. There are no untrusted checkouts or script-injection findings, so this is a hygiene concern rather than a severe risk.