kanti/server-timing

Repo bus factorcaution

One contributor made all commits in the last three months, leaving maintenance dependent on a single active contributor.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating thin recent development activity despite the recent release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a security-process gap.

Security policycaution

The repository has no published security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

The only workflow was fully analyzed with no injection or high-severity findings, but all six action references are unpinned, weakening build reproducibility and update control.