Ho

How many GitHub repositories pin their dependencies?

Hacker News

How many GitHub repositories pin their dependencies?

While researching GitHub Actions security best practices for a talk, I asked myself: "How many GitHub repositories actually pin their dependencies?" As I was not able to find any hard numbers, I went to gather the data myself. The results (and raw data) are available at: http://pin-gh-actions.kammel.dev/ The code is available on GitHub: https://github.com/datosh/pinned-actions in case you want to replicate the data or report any issues.

Share card

Actual performance

1points
Did not reach leaderboard

Launch Intel predictions

Analyze your own launch →
AppSumoMay struggle as an AppSumo deal · Missing: plus, platform, intuitive
44%44% predicted probability of success on AppSumo, based on ML models trained on real launch data.
best fitHighest predicted score across all platforms for this description.
Product HuntUnlikely to reach the leaderboard · Strong signals: code · Missing: mac, agents, macos
43%43% predicted probability of success on Product Hunt, based on ML models trained on real launch data.
TrustMRRLess likely to generate early MRR · Missing: mobile apps, ios, personal
40%40% predicted probability of success on TrustMRR, based on ML models trained on real launch data.
Hacker NewsMay not resonate with HN audience · Strong signals: io · Missing: https docs, excited, just released
35%35% predicted probability of success on Hacker News, based on ML models trained on real launch data.
nativeThis product was originally launched on this platform.
Indie HackersIH features products with proven revenue · Missing: supports, reddit linkedin, podcasting
20%20% predicted probability of success on Indie Hackers, based on ML models trained on real launch data.
Acquire.comPre-revenue stage for this audience · Missing: arr, mrr, revenue
15%15% predicted probability of success on Acquire.com, based on ML models trained on real launch data.
BetaListMay not resonate with beta-testers · Missing: web3, chat, crypto
4%4% predicted probability of success on BetaList, based on ML models trained on real launch data.

Correct prediction on native model

Similar products

Pi
Pin Me on IPFS44%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Pin Me on IPFS

Hacker News1
St
StableBuild – pin and freeze any build dependency51%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

StableBuild – pin and freeze any build dependency

Hacker News4
Howdy!
Howdy!15%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

All Your Links In One Pin

Indie Hackers2social-media
My
My Github résumé63%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

My Github résumé

Hacker News301
Gi
GitHub + Tetris = Gitris69%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

GitHub + Tetris = Gitris

Hacker News12
My
My Attempt to Gamify Github57%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

My Attempt to Gamify Github

Hacker News2
co
completeme, 't' in Github for Bash57%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

completeme, 't' in Github for Bash

Hacker News23
Gi
Gitty for GitHub63%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Gitty for GitHub

Hacker News1
Gi
GitHub Popularity Contest70%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

GitHub Popularity Contest

Hacker News5
A
A Github for writers?67%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

A Github for writers?

Hacker News181