registry / github-app-sts-action / 0.0.1-security

github-app-sts-action@0.0.1-security

security holding package

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 100.0% confidence. No malicious behavior was detected; 1 low-signal pattern(s) were surfaced and cleared.

Static reason

Verified npm security holding placeholder published by npm; no executable package surface is present.

public snapshot

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 0 file(s), 0 B of source

0 flagged

No flagged code excerpts are attached to this scan.

InfoNpm Security Holding Package

This report applies to github-app-sts-action@0.0.1-security.

See version security history for other recorded verdicts.

Review the evidence and your use of github-app-sts-action@0.0.1-security before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-07 16:15:00.942Z (UTC).