Below you will find pages that utilize the taxonomy term “Miragon”
April 28, 2026
Pin npm Dependencies
Version updated for https://github.com/Miragon/pin-npm-dependencies to version v1.1.0.
This action is used across all versions by 2 repositories. Action Type This is a Node action using Node version 24.
Go to the GitHub Marketplace to find the latest changes.
Action Summary The pin-npm-dependencies GitHub Action ensures all dependencies in package.json are strictly pinned to exact versions, preventing the use of version ranges, floating tags, and mutable git refs. This action addresses supply chain security risks by blocking unintended updates or malicious code injection that could occur through unpinned versions, particularly in automated workflows or AI-generated configurations. It supports npm, yarn, and pnpm, providing a safeguard against unpredictable or compromised dependencies in CI pipelines.