craft-plugins/benchmark

Release historydanger

Only two releases exist, with none in the last 12 months; the latest release was published on December 12, 2022. This is a substantial sign of limited ongoing maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the last push in 2022, this points to prolonged inactivity and abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For a small plugin this is a transparency gap, but it is less serious than the prolonged absence of release and commit activity.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both action references are unpinned, leaving a modest reproducibility and workflow supply-chain hygiene gap.