ActionRank
Check your actions

maturin-action

Actively maintained

PyO3/maturin-action · MIT

GitHub Action to install and run a custom maturin command with built-in support for cross compilation

★ 187 starsLast commit 1 months agoLatest v1.51.0
B
75
/ 100
Security 65Maintenance 95Popularity 49Reliability 96

Security signals

OpenSSF Scorecard7.5 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0

Mutable tags like v1.51.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0

Score breakdown

Security (35%)65
Popularity (20%)49
Maintenance (30%)95
Reliability (15%)96