neroxsh/Contributor Trust Report
Review public GitHub account and contribution signals before a maintainer acts.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| github-token | GitHub token with read access and permission to comment or label. | yes | — |
| ai-review | Use GitHub Models for a second, evidence-grounded review. | no | true |
| model | GitHub Models model identifier. | no | openai/gpt-4.1 |
| comment | Create or update the contributor report comment. | no | true |
| fail-on-high-risk | Fail the workflow when the report is high risk. | no | false |
Outputs
| name | description |
|---|---|
| author | Contributor login that was inspected. |
| risk-level | low, medium, or high. |
| risk-score | Numeric risk score from 0 to 100. |
| report-json | Machine-readable report. |