ActionRank
Check your actions

action-maven-publish

Abandoned

samuelmeuli/action-maven-publish · archived

📦 GitHub Action for automatically publishing Maven packages

★ 102 starsLast commit 6 years agoLatest v1.4.0
F
20
/ 100
Security 36Maintenance 0Popularity 35Reliability 0

Security signals

OpenSSF Scorecard2.7 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: samuelmeuli/action-maven-publish@201a45a3f311b2ee888f252ba9f4194257545709 # v1.4.0

Mutable tags like v1.4.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: samuelmeuli/action-maven-publish@201a45a3f311b2ee888f252ba9f4194257545709 # v1.4.0

Score breakdown

Security (35%)36
Popularity (20%)35
Maintenance (30%)0
Reliability (15%)0