Scan of 139 Popular JS/TS Repos Finds Only One Passes Basic GitHub Actions Checks
A developer building a GitHub Actions linter tested it on 149 popular JavaScript and TypeScript repositories with 1,000 to 20,000 stars, 139 of which had workflows. The review checked three basic items: dependency caching, concurrency settings on pull request runs, and job timeouts. Most repos lacked a concurrency group, and 61% of CI jobs had no timeout set, leaving them open to running for up to six hours. Only one repository passed all three checks, and the author notes the results reflect how easily these defaults are overlooked rather than criticizing the projects. The author acknowledges biases in the sample, such as its limitation to public open source projects, and has published the method and raw data alongside a free scoring tool.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)
Log in to join the discussion and vote.
Log in