ActionRank
Check your actions

cibuildwheel

Actively maintained

pypa/cibuildwheel · BSD-2-Clause

🎡 Build Python wheels for all the platforms with minimal configuration.

★ 2.3k starsLast commit 7 days agoLatest v4.1.1
B
73
/ 100
Security 64Maintenance 100Popularity 73Reliability 41

Security signals

OpenSSF Scorecard7.4 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: pypa/cibuildwheel@4726cd35bb13f7bde50cf2761f2499ac7b3aa32c # v4.1.1

Mutable tags like v4.1.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: pypa/cibuildwheel@4726cd35bb13f7bde50cf2761f2499ac7b3aa32c # v4.1.1

Score breakdown

Security (35%)64
Popularity (20%)73
Maintenance (30%)100
Reliability (15%)41