we considered using pull_request_target in order to give access to repository secrets, but decided against it. See #17 (comment) for more context.

We want to continue running the end-to-end tests as we have them anyway, but we want to add integration tests with mocked requests which won't require credentials and can also be run locally with npm test

We use Node's built-in fetch. Here are some relevant guides for testing/mocking

• https://undici.nodejs.org/#/docs/best-practices/writing-tests
• https://undici.nodejs.org/#/docs/best-practices/mocking-request