ActionRank

GitHub Action with TeXLive

Actively maintained

xu-cheng/texlive-action · MIT

GitHub Action to run arbitrary commands in a TeXLive environment

119 starsLast commit 2 days agoLatest v3
D
52
/ 100
Security 49Maintenance 65Popularity 32Reliability 60

Security signals

OpenSSF Scorecard4.9 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: xu-cheng/texlive-action@22c04326a5d855880f9d39bb955138bf11c6df80 # v3

Mutable tags like v3 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: xu-cheng/texlive-action@22c04326a5d855880f9d39bb955138bf11c6df80 # v3

Score breakdown

Security (35%)49
Popularity (20%)32
Maintenance (30%)65
Reliability (15%)60