
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
issue-labler
Advanced tools
The most comprehensive GitHub Action for automatic issue labeling, story point detection, and professional issue templates
The most comprehensive GitHub Action for automatic issue labeling, story point detection, and professional issue templates
If this GitHub Action helps your team, please consider supporting its development:
Sponsor on GitHub - Monthly recurring support
Connect with us:
Your sponsorship helps us:
The Ultimate GitHub Issue Management Solution - A GitHub Action that automatically creates professional issue templates, detects story points, and applies intelligent labels based on content and file changes. Perfect for mobile development teams, agile projects, and organizations that need consistent issue management across multiple repositories.
Add this simple workflow to your repository:
# .github/workflows/auto-label-issues.yml
name: Auto Label Issues & Templates
on:
issues:
types: [opened, edited]
pull_request:
types: [opened, edited, synchronize]
jobs:
auto-label:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
- uses: Devlander-Software/issue-labler@v1
with:
create_templates: 'true'
create_labels: 'true'
auto_label_issues: 'true'
That's it! The action will automatically:
After installation, test it by creating an issue with:
Title: "Test auto-labeling - Story Points: 5"
Body:
## Story Points
- [x] **Story Points: 5**
## Difficulty
- [x] **Difficulty: Easy**
## Priority
- [x] **Priority: Medium**
The GitHub Action will automatically run and apply labels based on your selections!
Complete Usage Guide - Everything you need to know about installation, configuration, and advanced usage
Quick Reference - Fast reference card for common usage patterns
Consistency Across Teams: Whether you're working on a single project or across multiple repositories in an organization, having consistent labels and issue templates makes it easier to manage issues.
Better Organization: The predefined labels help categorize and prioritize issues in a clear, structured way, so team members and product managers can easily understand the state of the project.
Easier Client Collaboration: Clients and customers can use familiar templates to submit feature requests or bug reports, ensuring that all communication follows a similar format. This reduces confusion and ensures requests are handled efficiently.
Visual Clarity with Emojis: The emoji-enhanced labels make the issue list visually appealing and easier to scan. Non-technical stakeholders will appreciate the intuitive visual cues that emojis provide.
Simplified Setup: This action automatically sets up everything you need to manage issues—issue templates and labels—so you don't have to manually create them for every new project.
📊 Data-Driven Analysis: NEW! Advanced data analysis and organization capabilities with structured labels, team insights, and export-ready data for external tools.
The Issue Labler now includes advanced data analysis capabilities that transform your issue management into a data-driven system:
# Generate templates and analysis data
npm run generate:all
# Get insights and recommendations
npm run analyze
# Export data for external tools
npm run generate:analysis
# Quick wins (high impact, low effort)
label:"⏳ Story Points: 1" label:"🚨 Priority: High"
# Frontend team tasks
label:"🎨 Client Side" OR label:"👩💻 Component/UI"
# Technical debt
label:"📉 Technical Debt"
📖 For detailed analysis guidance, see DATA_ANALYSIS.md
FAQs
The most comprehensive GitHub Action for automatic issue labeling, story point detection, and professional issue templates
We found that issue-labler demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.