ActionRank
Check your actions

@dailydotdev/devcard

Stale

dailydotdev/action-devcard · BSD-3-Clause

GitHub Action to download the devcard from https://daily.dev

★ 103 starsLast commit 8 months agoLatest 3.2.1
D
40
/ 100
Security 37Maintenance 29Popularity 39Reliability 70

Security signals

OpenSSF Scorecard2.8 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: dailydotdev/action-devcard@958db5a3e058fa60678968743b17214f7fc03a4b # 3.2.1

Mutable tags like 3.2.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: dailydotdev/action-devcard@958db5a3e058fa60678968743b17214f7fc03a4b # 3.2.1

Score breakdown

Security (35%)37
Popularity (20%)39
Maintenance (30%)29
Reliability (15%)70