WinGet Releaser
Actively maintainedvedantmgoyal9/winget-releaser · AGPL-3.0
Publish new releases of your application to the Windows Package Manager easily.
★ 304 starsLast commit 4 days agoLatest v2
D
54
/ 100
Security signals
OpenSSF ScorecardNo data
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record
How to use it safely
Recommended: pin to commit SHA
uses: vedantmgoyal9/winget-releaser@4ffc7888bffd451b357355dc214d43bb9f23917e # v2Mutable tags like v2 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.
Full workflow example
steps: - uses: vedantmgoyal9/winget-releaser@4ffc7888bffd451b357355dc214d43bb9f23917e # v2
Score breakdown
Security (35%)50
Popularity (20%)47
Maintenance (30%)61
Reliability (15%)60