Post

drydock.orgDrydock: pre-publish package reviewDrydock lets npm, PyPI, and VS Code maintainers review the exact package artifact before an npm stage publish or gated release goes live.

13/8/26, 7:05 pm1 repost7 likes

Jacob

@ebey.dev

13 Aug

Security tools for a distributed package management solution do not require any central/authoritative API. Notice the drydock PR has zero calls to atpm.dev. Just AT Protocol lookups / retrievals: github.com/JoviDeCroock... Still needed: a security alert system built on the BS moderation protocol.

atpm.devATPMDistributed package management powered by AT Protocol.