Post

Days since forgetting to approve a staged package: 0

Do you want to try out drydock.org? It will show you the diff of the staged package and send you an email when it's done all threat controls

Can I use it in a publish workflow from my local machine?

No, it automatically picks up either GitHub gated workflow environments or tarballs that are staged

Thanks. Maybe I need to build something into release-it for this. Any chance you could point me to npm docs re. this? Or is that one of your product USPs? 😬 Product idea: offer hooks or something for other notification mechanisms.

Yea, should add webhooks. slack and email currently, it’s not really a product but I haven’t gotten to open sourcing it just yet. will forward docs when I get home