ActionRank
Check your actions

lean-package-validator

Abandoned

raphaelstolt/lean-package-validator-action · MIT

A GitHub Action that validates a project/micro-package for its leanness.

★ 0 starsLast commit 1 year agoLatest v0.1.5
F
30
/ 100
Security 67Maintenance 18Popularity 4Reliability 0

Security signals

OpenSSF ScorecardNo data
SECURITY.md presentNo
Immutable releasesUnknown
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: raphaelstolt/lean-package-validator-action@0eeaef483c7216428b93e0b80b51e196d0f4f6dc # v0.1.5

Mutable tags like v0.1.5 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: raphaelstolt/lean-package-validator-action@0eeaef483c7216428b93e0b80b51e196d0f4f6dc # v0.1.5

Score breakdown

Security (35%)67
Popularity (20%)4
Maintenance (30%)18
Reliability (15%)0