asymmetric-research/locked-in
Lints for improper JS package manager usage (npm, pnpm, yarn, bun) to enforce supply chain security
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jun 16, 2026
- License
- Apache 2.0
Pinned Snippet
uses: asymmetric-research/locked-in@7978ff8e3717a30c18352ab1eb687e5f8210a5ac # v0.3.1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| commit | Specific commit SHA to use (defaults to latest on main branch) | no | "" |
Outputs
no outputs