Post

🚨 this is the new gold standard: trusted publishing _plus_ a maintainer with 2fa. 👉 check it out docs.npmjs.com/staged-publi...

Taghan Slinky 🏴󠁧󠁢󠁳󠁣󠁴󠁿

@conasg.com

21 May

This is good, but unless it's mandatory, I imagine an awful lot of developers are not going to set it up, meaning that the threat will persist from their packages?

daniel r(ooooooh) in nyc 🇺🇸

@danielroe.dev

likely so, as always. yet the current supply chain chaos is surely a profound incentive… we can create scripts to help 🙏

21/5/26, 9:52 am0 reposts2 likes

No replies yet.