New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details →
Socket
Book a DemoSign in
Socket

pull-request-vir

Package Overview
Dependencies
Maintainers
1
Versions
35
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

pull-request-vir

GitHub Action for pull requests

latest
Source
npmnpm
Version
1.4.6
Version published
Weekly downloads
561
12.65%
Maintainers
1
Weekly downloads
 
Created
Source

pull-request-vir

GitHub Action for pull requests.

type docs: https://electrovir.github.io/pull-request-vir

usage

  • Install this package into whatever repo you're planning to use it.

    • npm i -D pull-request-vir
  • Create a config file somewhere in the repo (not within source code).

    • The config file can be named anything but must be JavaScript or TypeScript.

    • If using TypeScript, import the Config type into the config file.

    • Create a config object that matches that type and export it as the default output:

      import {type Config} from 'pull-request-vir';
      
      export const config: Config = {
          // see type definition for full config options
          assignToAuthor: true,
          blockNoMerge: true,
          reviewRules: [
              {
                  autoAdd: true,
                  users: [
                      'electrovir',
                      'another-user',
                      'ghost',
                  ],
                  required: 2,
                  codeOwners: {
                      paths: [/^src\/backend\//],
                  },
              },
          ],
      };
      
  • Define a GitHub Actions workflow that uses pull-request-vir:

    # recommended triggers
    on:
        pull_request_review:
            types: [submitted, dismissed]
        pull_request:
            types:
                [
                    opened,
                    reopened,
                    labeled,
                    edited,
                    ready_for_review,
                    review_requested,
                    review_request_removed,
                ]
    jobs:
        merge-checks:
            runs-on: ubuntu-latest
            steps:
                # pull-request-vir needs the repo checked out so it can read your config
                - uses: actions/checkout@v4.1.1
                - uses: electrovir/pull-request-vir@latest
                  with:
                      config_file: relative/path/to/config.ts
    
  • Push to GitHub and watch the magic.

Keywords

github

FAQs

Package last updated on 13 Oct 2025

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts