npm package report
Is @actions/github safe?
Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.
npm packagelast checked 2026-09-19
@actions/github · verdict ALLOW · no known risk
0.6/10
XYZ SCORE
All signals clearclearOK
No known-malicious match, advisory, commit-level finding or anomaly.
PACKAGE @actions/githubECOSYSTEM npmDECISION ALLOW
Package facts
Weekly downloads
10.8M
GitHub stars
5.6k
Centrality tier
tier 2
Build provenance
unknown
Direct dependencies
0
Baked snapshot · run a live check for the current verdict · browse all packages
Other package reports
actions__http-clientadal-nodeaddactions__coreactions__cacheacquit