tinybench

Repo toolingcaution

The project uses TypeScript, Vitest, and npm build tooling, supporting a structured build and test process; no security scanning tools were detected, which is a modest gap.

Security policycaution

The repository has no security policy, reducing transparency for vulnerability reporting and response even though other maintenance evidence is strong.

Workflow auditcaution

All four workflows were analyzed, all 40 action references are pinned, and no untrusted checkouts or script injection were found. Five low-confidence cache-poisoning findings in the release workflow are hygiene concerns rather than strong evidence of danger.