ActionRank
Check your actions

Logseq Publish SPA

Stale

logseq/publish-spa · MIT

A github action and CLI to publish logseq graphs as a SPA app

★ 313 starsLast commit 3 months agoLatest v0.3.1
D
42
/ 100
Security 39Maintenance 32Popularity 40Reliability 70

Security signals

OpenSSF Scorecard3.2 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: logseq/publish-spa@3fa40f2288e96b5927037610e2445f892a438d79 # v0.3.1

Mutable tags like v0.3.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: logseq/publish-spa@3fa40f2288e96b5927037610e2445f892a438d79 # v0.3.1

Score breakdown

Security (35%)39
Popularity (20%)40
Maintenance (30%)32
Reliability (15%)70