ActionRank
Check your actions

vibecop PR Gate

Stale

bhvbhushan/vibecop · MIT

AI code quality toolkit — deterministic linter for the AI coding era. 22 detectors, GitHub Action PR gate, zero LLM required.

★ 55 starsLast commit 3 months agoLatest v0.4.3
C
62
/ 100
Security 75Maintenance 66Popularity 25Reliability 70

Security signals

OpenSSF ScorecardNo data
SECURITY.md presentYes
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: bhvbhushan/vibecop@7bd14c837a04c6c9bf464ff8fadee6d4fbb470ff # v0.4.3

Mutable tags like v0.4.3 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: bhvbhushan/vibecop@7bd14c837a04c6c9bf464ff8fadee6d4fbb470ff # v0.4.3

Score breakdown

Security (35%)75
Popularity (20%)25
Maintenance (30%)66
Reliability (15%)70