tinybench

Security policycaution

The repository has no security policy, which is a transparency gap for reporting vulnerabilities, although the active organization-backed project and provenance provide compensating evidence.

Workflow auditcaution

All 4 workflows were analyzed with no untrusted checkouts, script injection, or unpinned actions; the five cache-poisoning findings are low-confidence hygiene warnings, while one workflow has top-level write permissions.