package-maintenance-dev/Github action to find unsupported dependencies using package-maintenance.dev

Searches unsupported dependencies using package-maintenance.dev index and project SBOM.

Trust Signals

name	description	required	default
github-token	GitHub token to access the GitHub API. This value can be retrieved from the GitHub secrets context.	no	—
packages-ignore	List of packages to ignore. The action will not check the versions of the packages in this list. The value is optional and the default value is an empty list, that means all packages will be checked. The list should be in format of multiline string with each line in PURL format without version. For example: ``` pkg:npm/express pkg:pypi/django ``` Version is not required in this case and will be ignored if provided. The action will check only the package id and ecosystem.	no	""
packages-scores-thresholds	The minimum scores threshold for the packages. The action will fail if the score of a package is below this threshold. This value format is a list of key-value pairs in the format of `metric:threshold`. For example: `source.commit.frequency:B,binary.release.recency:A`. The value is optional and the default value is `*:B`.	no	binary_release_recency:B,source_commit_recency:B,source_commit_frequency:B

no outputs