Auto-Update CONTRIBUTORS

Abandoned

minicli/action-contributors · MIT

GitHub Action to dynamically update CONTRIBUTORS file

★ 84 starsLast commit 3 years agoLatest v3.3

/ 100

Security signals

OpenSSF Scorecard2.0 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: minicli/action-contributors@20ec03af008cb51110a3137fbf77f59a4fd7ff5a # v3.3

Mutable tags like v3.3 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: minicli/action-contributors@20ec03af008cb51110a3137fbf77f59a4fd7ff5a # v3.3

Score breakdown

Security (35%)32

Popularity (20%)32

Maintenance (30%)4

Reliability (15%)50