ActionRank

Automatic Pull Request

Abandoned

irgolic/AutoPR · MIT · archived

AutoPR autonomously wrote pull requests in response to issues

1.4k starsLast commit 4 months agoLatest v0.2.0
F
24
/ 100
Security 37Maintenance 0Popularity 54Reliability 0

Security signals

OpenSSF Scorecard2.8 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: irgolic/AutoPR@50cfaeeaaedc4a6529b5a363ba237dce1404ad03 # v0.2.0

Mutable tags like v0.2.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: irgolic/AutoPR@50cfaeeaaedc4a6529b5a363ba237dce1404ad03 # v0.2.0

Score breakdown

Security (35%)37
Popularity (20%)54
Maintenance (30%)0
Reliability (15%)0