math280h/safe-pkgs Audit
Audit project dependencies for supply-chain risks using safe-pkgs
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to lockfile or project directory | no | . |
| registry | Registry override (npm, cargo, pypi). Auto-detects from lockfile if omitted. | no | — |
| version | safe-pkgs release version to download | no | latest |
| fail-on-severity | Fail the workflow if any package meets this severity (low, medium, high, critical, off) | no | high |
Outputs
| name | description |
|---|---|
| allow | "true" or "false" — overall audit result |
| risk | Highest severity found |
| total | Total packages audited |
| denied | Number of denied packages |
| json | Raw JSON output from safe-pkgs |