Overview

6 Pull requests opened by3 people

• feat: detect vulnerable GitHub Actions

  #1021 openedMar 21, 2025

• chore(deps): update pre-commit requirement from <4.2.0,>=4.0.0 to >=4.0.0,<4.3.0

  #1022 openedMar 24, 2025

• chore(deps): bump github/codeql-action from 3.28.10 to 3.28.12

  #1023 openedMar 24, 2025

• chore(deps): bump actions/upload-artifact from 4.3.3 to 4.6.2

  #1024 openedMar 24, 2025

• chore(deps): bump actions/download-artifact from 4.1.7 to 4.2.1

  #1025 openedMar 24, 2025

• refactor: log relative paths for file

  #1029 openedMar 26, 2025

2 Issues opened by2 people

• pypi malware reporting false positives due to incorrect skip result evaluation

  #1027 openedMar 26, 2025

• pkg:maven/com.simplaex/java-druid-client@1.2.0 got UNKNOWN for mcn_scm_authenticity_1, expect FAILED

  #1026 openedMar 25, 2025

3 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• feat: check PyPI registry when deps.dev fails to find a source repository

  #982 commented onMar 20, 2025 • 5 new comments

• refactor: improve experimental source code pattern analysis of pypi packages

  #965 commented onMar 26, 2025 • 3 new comments

• feat: add GitHub attestation discovery

  #1020 commented onMar 19, 2025 • 0 new comments