Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

@actions/artifact

Ecosystem:
npm
Package URL:
pkg:npm/@actions/artifact
Total PRs:
177 Dependabot PRs
Latest PR:
about 2 months ago
Unique Repositories:
64 repositories
Unique Repos (30 days):
2 repositories
Security Advisories
@actions/artifact has an Arbitrary File Write via artifact extraction
GHSA-6q32-hq47-5qq3 CVE-2024-42471 HIGH published almost 2 years ago • updated 7 days ago
### Impact Versions of `actions/artifact` before 2.1.7 are vulnerable to arbitrary file write when using `downloadArtifactInternal`, `downloadArti...
Recent PRs
RSS Feed
Bump @actions/artifact from 2.3.1 to 2.3.2

marcofranssen/setup-kubectl #243

2.3.1 → 2.3.2 Patch PR
Open about 1 year ago 2 comments
marcofranssen
Bump @actions/artifact from 2.2.1 to 2.3.2

forcedotcom/run-code-analyzer #70

2.2.1 → 2.3.2 Minor PR
Closed about 1 year ago
forcedotcom
build(deps): bump @actions/artifact from 2.1.11 to 2.2.1

dawidd6/action-download-artifact #323

2.1.11 → 2.2.1 Minor PR
Closed over 1 year ago 3 comments
dawidd6
Bump the npm group across 1 directory with 12 updates

zendesk/codeql-action #225

2.1.9 → 2.1.11 Patch PR
Open over 1 year ago 3 comments
zendesk
build(deps): bump the npm_and_yarn group across 11 directories with 14 updates

JoftheV/workers-sdk #1

2.0.1 → 2.1.7 Minor PR
Merged over 1 year ago 2 comments
JoftheV
Bump @actions/artifact from 2.1.7 to 2.1.8 in the npm-production group

OpenModelica/openmodelica-library-testing-action #35

2.1.7 → 2.1.8 Patch PR
Closed almost 2 years ago
OpenModelica
Bump @actions/artifact from 2.1.0 to 2.1.7 in the npm-production group across 1 directory

scanoss/gha-code-scan #51

2.1.0 → 2.1.7 Patch PR
Closed about 2 years ago 3 comments
scanoss
Bump @actions/artifact from 1.1.1 to 1.1.2

prettier/prettier-regression-testing #406

1.1.1 → 1.1.2 Patch PR
Closed almost 3 years ago 1 comment
prettier
Bump @actions/artifact from 1.1.0 to 1.1.1

michaelkaye/setup-matrix-synapse #81

1.1.0 → 1.1.1 Patch PR
Closed over 3 years ago
michaelkaye
build(deps): bump @actions/artifact from 1.1.0 to 1.1.1

actions-marketplace-validations/dawidd6_action-download-artifact #4

1.1.0 → 1.1.1 Patch PR
Closed over 3 years ago 1 comment
actions-marketplace-validations
Bump @actions/artifact from 1.1.0 to 1.1.1

actions-marketplace-validations/h5bp_server-configs-test #3

1.1.0 → 1.1.1 Patch PR
Closed over 3 years ago 1 comment
actions-marketplace-validations
Package Details
Name: @actions/artifact
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/@actions/artifact
JSON API: View JSON
Security Advisories

1

Active advisories
HIGH 1
View All npm Advisories
Package Information
Description:

Actions artifact lib

Repository: https://github.com/actions/toolkit
Homepage: https://github.com/actions/toolkit/tree/main/packages/artifact
Latest Release: 2.3.2
over 1 year ago
Dependent Repos: 475
Dependent Packages: 32
Downloads: 522,228
Ranking: Top 0.778% by dependent repos Top 0.3476% by downloads Top 0.9688% by dependent pkgs
PR Status
Open 75 (42.4%)
Merged 2 (1.1%)
Closed 84 (47.5%)
PR Types
Major 79 (44.6%)
Minor 15 (8.5%)
Patch 67 (37.9%)