ActionRank
Check your actions

Flatter

Stale

andyholmes/flatter · GPL-3.0

Build and host a Flatpak repository

★ 56 starsLast commit 4 months agoLatest v1.0.0
D
47
/ 100
Security 50Maintenance 39Popularity 36Reliability 70

Security signals

OpenSSF ScorecardNo data
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: andyholmes/flatter@b32437fdafdca87317165f558dbcba78ebb20e1e # v1.0.0

Mutable tags like v1.0.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: andyholmes/flatter@b32437fdafdca87317165f558dbcba78ebb20e1e # v1.0.0

Score breakdown

Security (35%)50
Popularity (20%)36
Maintenance (30%)39
Reliability (15%)70