ActionRank
Check your actions

WinGet Releaser

Actively maintained

vedantmgoyal9/winget-releaser · AGPL-3.0

Publish new releases of your application to the Windows Package Manager easily.

★ 304 starsLast commit 5 days agoLatest v2
D
54
/ 100
Security 50Maintenance 61Popularity 47Reliability 60

Security signals

OpenSSF ScorecardNo data
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: vedantmgoyal9/winget-releaser@4ffc7888bffd451b357355dc214d43bb9f23917e # v2

Mutable tags like v2 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: vedantmgoyal9/winget-releaser@4ffc7888bffd451b357355dc214d43bb9f23917e # v2

Score breakdown

Security (35%)50
Popularity (20%)47
Maintenance (30%)61
Reliability (15%)60