Dependent Issues

Abandoned

z0al/dependent-issues · MIT · archived

📦 A GitHub Action for marking issues as dependent on another

★ 170 starsLast commit 2 years agoLatest v1.5.2

/ 100

Security signals

OpenSSF Scorecard3.2 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: z0al/dependent-issues@950226e7ca8fc43dc209a7febf67c655af3bdb43 # v1.5.2

Mutable tags like v1.5.2 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: z0al/dependent-issues@950226e7ca8fc43dc209a7febf67c655af3bdb43 # v1.5.2

Score breakdown

Security (35%)39

Popularity (20%)40

Maintenance (30%)0

Reliability (15%)0