simple-statistics

Security policycaution

No security policy was found in the repository, leaving vulnerability reporting and response expectations less transparent.

Workflow auditcaution

Both workflows were analyzed with no audit findings or untrusted checkout and script-injection sinks. However, all 7 action references are unpinned and one workflow grants top-level write permissions, creating a modest reproducibility and token-scope concern.