Nothing but Nix
Actively maintainedwimpysworld/nothing-but-nix · MIT
Create a 130GB Nix ️store in GitHub runners ❄️ Multi-partition BTRFS RAID-0 for /nix 💪 Brutally purges unnecessary software 🪓 Dynamically grows the Nix store 📈
★ 239 starsLast commit 1 months agoLatest v10
C
58
/ 100
Security signals
OpenSSF ScorecardNo data
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record
How to use it safely
Recommended: pin to commit SHA
uses: wimpysworld/nothing-but-nix@687c797a730352432950c707ab493fcc951818d7 # v10Mutable tags like v10 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.
Full workflow example
steps: - uses: wimpysworld/nothing-but-nix@687c797a730352432950c707ab493fcc951818d7 # v10
Score breakdown
Security (35%)50
Popularity (20%)42
Maintenance (30%)86
Reliability (15%)39