Dart and Flutter Package Publisher
Abandonedk-paxian/dart-package-publisher · MIT
Action to Publish Dart / Flutter Package To https://pub.dev When you need to publish a package, just bump the version in pubspec.yaml
★ 68 starsLast commit 1 year agoLatest v.1.6.2
F
31
/ 100
Security signals
OpenSSF Scorecard2.8 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record
How to use it safely
Recommended: pin to commit SHA
uses: k-paxian/dart-package-publisher@8fdba1dbf624c712706281a6f91cb50b6bfc2eaf # v.1.6.2Mutable tags like v.1.6.2 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.
Full workflow example
steps: - uses: k-paxian/dart-package-publisher@8fdba1dbf624c712706281a6f91cb50b6bfc2eaf # v.1.6.2
Score breakdown
Security (35%)37
Popularity (20%)32
Maintenance (30%)19
Reliability (15%)38