Reaction Comments

Actively maintained

dessant/reaction-comments · MIT

👍 📨 💔 GitHub Action that deletes +1 comments

★ 52 starsLast commit 1 months agoLatest v5.0.1

/ 100

Security signals

OpenSSF Scorecard4.1 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: dessant/reaction-comments@170a79b6e2538a1df7ba669ac527d7457cd3b128 # v5.0.1

Mutable tags like v5.0.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: dessant/reaction-comments@170a79b6e2538a1df7ba669ac527d7457cd3b128 # v5.0.1

Score breakdown

Security (35%)45

Popularity (20%)25

Maintenance (30%)87

Reliability (15%)70