macocci7/php-benchmark

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. With no newer activity after the latest release, this raises concern about slowing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For this small package that is a hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This lowers transparency but is not severe on its own.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all six action references are unpinned. Unpinned actions weaken build reproducibility and supply-chain hygiene.