gamez/duration

Project backingcaution

The repository is owned by an individual rather than an organization, so the single-contributor concentration is not buffered by visible organizational backing.

Repo bus factorcaution

All 10 recent commits came from one contributor, giving the project a single-person maintenance dependency and increasing continuity risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected; the repository's SECURITY.md partly compensates for this hygiene gap.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, injection findings, or high-confidence audit issues. However, all 3 action references are unpinned, which weakens build reproducibility and action supply-chain control.