“A GitHub action to create a pull request for changes to your repository in the actions workspace”
Local reference
Suspicious dependency
Inferred
Referenced by 1 sample
Well-known
notable severity, 98% confident.
app/development
GitLab release update method
notable severity, 99% confident.
lib/format
iconv-lite string decoder implementation
notable severity, 99% confident.
lib/web
whatwg-url basicURLParse API marker
Objectives
notable severity, 96% confident.
supply-chain/credential-theft
GitHub Actions OIDC environment variables
Micro-behaviors
notable severity, 94% confident.
communications/proxy
Target host is loopback or wildcard IPv4
notable severity, 100% confident.
communications/socket
JavaScript outbound socket connection
notable severity, 92% confident.
data/control-flow
CommonJS module re-exports required package
notable severity, 95% confident.
data/decode
Inline alphabet-table index lookup
notable severity, 93% confident.
data/source/property
Runs a high-iteration JavaScript loop
notable severity, 95% confident.
fs/directory
Shell changes working directory
notable severity, 93% confident.
os/package-manager
Invokes a global npm package installation
notable severity, 94% confident.
process/create/shell
GitHub Actions creates and pushes a tag
notable severity, 95% confident.
process/interpreter
Access to process.binding
Metadata
notable severity, 98% confident.
build
Code bundled with the ncc webpack runtime
notable severity, 95% confident.
library
Preserves original JavaScript console methods
notable severity, 96% confident.
package/quality
Node proxy-agent CONNECT TLS upgrade client
notable severity, 95% confident.
package/testing
Jest test framework
20 of 64 traits shown
Identity
| SHA-256 | 8b478d8f233cd650f9f3cd9f34c0dd1a6f55155e6b74012aba257ed628a317b4 |
|---|---|
| Canonical SHA-256 | 00f811be9d9d171ff72e32aa318e9722554e18bdac78e454a15ec812719b23de |
| Filename | 38e0b6e68b4c852a5500a94740f0e535e0d7ba54 |
| Package | peter-evans/create-pull-request |
| Version | 38e0b6e68b4c852a5500a94740f0e535e0d7ba54 |
| PURL | pkg:github/peter-evans/create-pull-request@38e0b6e68b4c852a5500a94740f0e535e0d7ba54 |
Origin
| Source | upload |
|---|---|
| Ecosystem | github |
| Domain | github.com |
| URL | https://codeload.github.com/peter-evans/create-pull-request/tar.gz/38e0b6e68b4c852a5500a94740f0e535e0d7ba54 |
Timeline
| First seen | 11 Aug 2026 18:17 UTC |
|---|---|
| First analyzed | 11 Aug 2026 18:24 UTC |
| Last analyzed | 12 Aug 2026 20:12 UTC |
| Last updated | 12 Aug 2026 20:11 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | upload |
| Traits version | 73866 |
Not seeing what you expected? Let us know