ActionRank
Check your actions

PortfolioFy

Abandoned

kaustubhgupta/PortfolioFy · MIT

🔥 Dynamically Self Updating Portfolio GitHub Action

★ 128 starsLast commit 4 years agoLatest v3.2.1
F
28
/ 100
Security 32Maintenance 4Popularity 37Reliability 58

Security signals

OpenSSF Scorecard2.0 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: kaustubhgupta/PortfolioFy@26613f58457e021bf1f420c4d81626ff284100cd # v3.2.1

Mutable tags like v3.2.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: kaustubhgupta/PortfolioFy@26613f58457e021bf1f420c4d81626ff284100cd # v3.2.1

Score breakdown

Security (35%)32
Popularity (20%)37
Maintenance (30%)4
Reliability (15%)58