Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

@actions/artifact

Ecosystem:
npm
Package URL:
pkg:npm/@actions/artifact
Total PRs:
177 Dependabot PRs
Latest PR:
about 2 months ago
Unique Repositories:
64 repositories
Unique Repos (30 days):
2 repositories
Security Advisories
@actions/artifact has an Arbitrary File Write via artifact extraction
GHSA-6q32-hq47-5qq3 CVE-2024-42471 HIGH published almost 2 years ago • updated 6 days ago
### Impact Versions of `actions/artifact` before 2.1.7 are vulnerable to arbitrary file write when using `downloadArtifactInternal`, `downloadArti...
Recent PRs (filtered by: Minor PRs )
RSS Feed Clear filter
ci(scripts)(deps): bump the actions-toolkit group in /.github/scripts with 2 updates

arolariu/arolariu.ro #462

6.1.0 → 6.2.0 Minor PR
Open 4 months ago 1 comment
arolariu
Bump the npm-dep-updates group across 1 directory with 19 updates

ecmwf/build-package #12

2.2.1 → 2.3.2 Minor PR
Open 9 months ago
ecmwf
Bump the non-breaking-changes group with 6 updates

incycle-github-terraform-demo/deploy-pages #2

2.1.8 → 2.3.2 Minor PR
Open 9 months ago
incycle-github-terraform-demo
Bump the non-breaking-changes group with 6 updates

ghes-to-ghec-test/deploy-pages #5

2.1.8 → 2.3.2 Minor PR
Open 9 months ago
ghes-to-ghec-test
Bump the npm-dep-updates group across 1 directory with 17 updates

ecmwf/build-package #8

2.2.1 → 2.3.2 Minor PR
Open 11 months ago
ecmwf
Bump @actions/artifact from 2.2.1 to 2.3.2

AlexKnusel-MKETool/rudder-stack-versioning #21

2.2.1 → 2.3.2 Minor PR
Open about 1 year ago
AlexKnusel-MKETool
Bump the npm-dep-updates group across 1 directory with 16 updates

ecmwf/build-package #7

2.2.1 → 2.3.2 Minor PR
Open about 1 year ago 3 comments
ecmwf
Bump the npm-dependencies group across 1 directory with 8 updates

gradle/develocity-actions #108

2.2.2 → 2.3.2 Minor PR
Open about 1 year ago 1 comment
gradle
Bump the npm-dep-updates group across 1 directory with 15 updates

ecmwf/build-package #5

2.2.1 → 2.3.2 Minor PR
Closed about 1 year ago 1 comment
ecmwf
Bump the npm-dependencies group across 1 directory with 7 updates

gradle/develocity-actions #106

2.2.2 → 2.3.2 Minor PR
Closed about 1 year ago 1 comment
gradle
Bump @actions/artifact from 2.2.1 to 2.3.2

marcofranssen/setup-iamlive #274

2.2.1 → 2.3.2 Minor PR
Merged about 1 year ago
marcofranssen
Bump @actions/artifact from 2.2.0 to 2.3.2

PicoCentauri/comment-artifact #64

2.2.0 → 2.3.2 Minor PR
Closed about 1 year ago
PicoCentauri
Bump @actions/artifact from 2.2.1 to 2.3.2

forcedotcom/run-code-analyzer #70

2.2.1 → 2.3.2 Minor PR
Closed about 1 year ago
forcedotcom
build(deps): bump @actions/artifact from 2.1.11 to 2.2.1

dawidd6/action-download-artifact #323

2.1.11 → 2.2.1 Minor PR
Closed over 1 year ago 3 comments
dawidd6
build(deps): bump the npm_and_yarn group across 11 directories with 14 updates

JoftheV/workers-sdk #1

2.0.1 → 2.1.7 Minor PR
Merged over 1 year ago 2 comments
JoftheV
Package Details
Name: @actions/artifact
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/@actions/artifact
JSON API: View JSON
Security Advisories

1

Active advisories
HIGH 1
View All npm Advisories
Package Information
Description:

Actions artifact lib

Repository: https://github.com/actions/toolkit
Homepage: https://github.com/actions/toolkit/tree/main/packages/artifact
Latest Release: 2.3.2
about 1 year ago
Dependent Repos: 475
Dependent Packages: 32
Downloads: 522,228
Ranking: Top 0.778% by dependent repos Top 0.3476% by downloads Top 0.9688% by dependent pkgs
PR Status
Open 75 (42.4%)
Merged 2 (1.1%)
Closed 84 (47.5%)
PR Types
Major 79 (44.6%)
Minor 15 (8.5%)
Patch 67 (37.9%)