ActionRank
Check your actions

swift-package-dependencies-check

Abandoned

MarcoEidinger/swift-package-dependencies-check

Catch up with outdated versions based on your package dependency requirements

★ 88 starsLast commit 1 year agoLatest 2.7.0
F
36
/ 100
Security 37Maintenance 20Popularity 34Reliability 70

Security signals

OpenSSF Scorecard2.8 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: MarcoEidinger/swift-package-dependencies-check@16ddf76395e7eb8488694c0b35b29c202d8b51c9 # 2.7.0

Mutable tags like 2.7.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: MarcoEidinger/swift-package-dependencies-check@16ddf76395e7eb8488694c0b35b29c202d8b51c9 # 2.7.0

Score breakdown

Security (35%)37
Popularity (20%)34
Maintenance (30%)20
Reliability (15%)70