3 ms·Just don't use actions which pull in arbitrary npm packages without a lockfile.by baobun 10mo agoJust don't use actions which pull in arbitrary npm packages without a lockfile.