testo/test

Dangerous workflowscaution

The only workflow uses pull_request_target, a sensitive trigger that can expose repository privileges when handling untrusted pull requests. No untrusted checkout or script injection was detected, which limits but does not remove the concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. The README identifies it as an automatically synchronized read-only mirror, and frequent releases partly compensate, but this repository itself offers no direct development activity.

Repo issue activitycaution

There were no new or merged pull requests and no issue activity in the last month, leaving limited evidence of community maintenance; the latest release activity provides some compensation.

Repo popularitycaution

The repository has zero stars, forks, and watchers, so there is little visible adoption or outside redundancy; this is supporting evidence rather than a decisive health problem for a young plugin.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured, leaving a security-hygiene gap that does not by itself indicate abandonment.