ccmbenchmark/ting

Repo popularitycaution

The repository has only 2 stars and 6 forks, so independent adoption evidence is limited. This is supporting context rather than a maintenance failure because recent release and commit activity are strong.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a transparency and hygiene gap, partly offset by the repository's active development.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations unclear. This lowers transparency but does not by itself indicate abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all 3 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.