ActionRank
Check your actions

CordCloud Action

Abandoned

yanglbme/cordcloud-action · MIT

❤ Auto check in Cord Cloud site by GitHub Action | GitHub Action 实现 Cord Cloud 帐号自动续命

★ 82 starsLast commit 2 years agoLatest v0.1.1
F
31
/ 100
Security 39Maintenance 4Popularity 30Reliability 70

Security signals

OpenSSF Scorecard3.1 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: yanglbme/cordcloud-action@88498a77853f5137ed2b7d57f710c92784942425 # v0.1.1

Mutable tags like v0.1.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: yanglbme/cordcloud-action@88498a77853f5137ed2b7d57f710c92784942425 # v0.1.1

Score breakdown

Security (35%)39
Popularity (20%)30
Maintenance (30%)4
Reliability (15%)70