notfoundbot

Stale

tmcw/notfoundbot

fix & archive outgoing links on your website

★ 116 starsLast commit 3 months agoLatest v3.1.0

/ 100

Security signals

OpenSSF Scorecard2.6 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: tmcw/notfoundbot@feeb668347f9c0ef8abdc4a8c43778fce2ee85d9 # v3.1.0

Mutable tags like v3.1.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: tmcw/notfoundbot@feeb668347f9c0ef8abdc4a8c43778fce2ee85d9 # v3.1.0

Score breakdown

Security (35%)36

Popularity (20%)39

Maintenance (30%)60

Reliability (15%)70