ActionRank

action-maven-publish

Abandoned

samuelmeuli/action-maven-publish · archived

📦 GitHub Action for automatically publishing Maven packages

102 starsLast commit 6 years agoLatest v1.4.0
F
20
/ 100
Security 36Maintenance 0Popularity 35Reliability 0

Security signals

OpenSSF Scorecard2.7 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: samuelmeuli/action-maven-publish@201a45a3f311b2ee888f252ba9f4194257545709 # v1.4.0

Mutable tags like v1.4.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: samuelmeuli/action-maven-publish@201a45a3f311b2ee888f252ba9f4194257545709 # v1.4.0

Score breakdown

Security (35%)36
Popularity (20%)35
Maintenance (30%)0
Reliability (15%)0

Add this badge to your README

ActionRank grade badge for action-maven-publish
Markdown
[![ActionRank](https://actionrank.dev/api/badge/samuelmeuli-action-maven-publish)](https://actionrank.dev/actions/samuelmeuli-action-maven-publish)
HTML version
HTML
<a href="https://actionrank.dev/actions/samuelmeuli-action-maven-publish"><img src="https://actionrank.dev/api/badge/samuelmeuli-action-maven-publish" alt="ActionRank score"></a>

Free to use, no attribution required — the badge updates itself as the score changes. How badges work

Get alerts for action-maven-publish

We'll email you only if action-maven-publish becomes abandoned or a new advisory is published. Unsubscribe any time. How we handle your address